https://garzoncybersolutions.com/insights.html AI and Governance briefings from Garzon Cyber Solutions. Threat briefings and market analysis from Garzon Cyber Solutions. Cyber security incidents, regulatory change and what both mean commercially for organisations operating in the UK, the EU and the Americas. en-gb Garzon Cyber Solutions jonathan@garzoncybersolutions.com (Jonathan Garzon) jonathan@garzoncybersolutions.com (Jonathan Garzon) Fri, 09 Oct 2026 05:27:01 +0000 Tue, 15 Sep 2026 09:00:00 +0100 GCS RSS generator https://garzoncybersolutions.com/gcs_regulatory_briefing_nineregulators/ https://garzoncybersolutions.com/gcs_regulatory_briefing_nineregulators/ The EU AI Act's enforcement powers applied on 2 August 2026, with penalties reaching 35 million euros or 7% of worldwide turnover. Member states were meant to designate the authorities by August 2025. On the most recent public count nine of twenty-seven had done so and six had designated nothing at all. The gap is not grace. Every member state has already designated the authorities that police fundamental rights, so waiting for the market surveillance authority is waiting for the wrong regulator. Tue, 15 Sep 2026 09:00:00 +0100 GCS Regulatory Briefing Jonathan Garzon https://garzoncybersolutions.com/gcs_regulatory_briefing_frontierrules/ https://garzoncybersolutions.com/gcs_regulatory_briefing_frontierrules/ On 14 September OpenAI told a committee of MPs and peers that the UK should legislate now for the handful of firms building frontier models, including itself, while sparing smaller companies. The carve out is not the relief it sounds like. Every harm the committee named is a deployer harm, governed by law that already applies, and frontier obligations propagate outwards as contract clauses and questionnaire lines long before they arrive as legislation. Mon, 14 Sep 2026 09:00:00 +0100 GCS Regulatory Briefing Jonathan Garzon https://garzoncybersolutions.com/gcs_regulatory_briefing_aitransparency/ https://garzoncybersolutions.com/gcs_regulatory_briefing_aitransparency/ The Digital Omnibus deferred the EU AI Act high-risk obligations six days before they applied, and the reporting said the Act had been delayed. Article 50 transparency landed on 2 August 2026 exactly as written. It catches organisations with no high-risk AI at all, it reaches UK firms with EU users, and the penalty band is up to 15 million euros or 3% of worldwide turnover. Sun, 13 Sep 2026 09:00:00 +0100 GCS Regulatory Briefing Jonathan Garzon https://garzoncybersolutions.com/ai-assurance-gap/ https://garzoncybersolutions.com/ai-assurance-gap/ 78% of executives lack confidence their organisation could pass an independent AI governance audit within 90 days. Thu, 16 Apr 2026 09:00:00 +0100 AI & Governance Jonathan Garzon https://garzoncybersolutions.com/ai-accountability-shift/ https://garzoncybersolutions.com/ai-accountability-shift/ 79% of corporate boards now treat AI governance as a standing agenda item, up from 41% twelve months earlier. Regulation is enforceable, fiduciary duty has caught up, and insurers are repricing the risk. Mon, 13 Apr 2026 09:00:00 +0100 AI & Governance Jonathan Garzon https://garzoncybersolutions.com/ai-oversight-gap/ https://garzoncybersolutions.com/ai-oversight-gap/ 97% of organisations that suffered an AI-related breach had no proper access controls on their AI systems. Shadow AI is now the fastest-growing breach vector. Fri, 10 Apr 2026 09:00:00 +0100 AI & Governance Jonathan Garzon https://garzoncybersolutions.com/ai-compliance-frontier/ https://garzoncybersolutions.com/ai-compliance-frontier/ The EU AI Act is live. ISO 27001:2022 introduced new AI and cloud controls. DORA is in effect for financial services. Most UK organisations haven't fully mapped their obligations yet. Wed, 01 Apr 2026 09:00:00 +0100 AI & Governance Jonathan Garzon