Insights
Regulation, technology and the way regulated organisations actually run. Written by the people who do the work, not by a marketing team.
Featured
AllRegulatory complianceResilience & securityRisk & assuranceTechnology & digital
The Change Nobody Initiated
A process that worked in March produces subtly worse output in September. Nobody changed the code. No release went out. There is no ticket, no incident, no alert.…
Europe just moved on cloud sovereignty — and the question every provider will face isn’t “if”, it’s “which level”
On 3 June 2026, the European Commission adopted its proposal for the Cloud and AI Development Act (CADA) — a Regulation built to close a gap the numbers…
The Cyber Resilience Act countdown has started
The Cyber Resilience Act (Regulation (EU) 2024/2847) is the first horizontal cybersecurity law covering all products with digital elements placed on the EU market — hardware, software, and…
Too Much Central Control Kills Development. Too Little Produces Chaos.
In Five Barriers CEOs Must Overcome for AI Impact, published in March, BCG puts a number on something most people running AI programmes can feel but struggle to…
Adoption Tripled. Governance Went Backwards.
Two numbers from this year, moving in opposite directions. Regular use of AI on corporate devices went from 15% of employees to 45% in twelve months, according to…
Four Things Keep Going Wrong. They Are One Thing, Arriving in Four Stages.
Four things keep going wrong. They look like four separate problems, which is why they get separate owners — strategy to the executive committee, governance to risk, tool…
Your Supervisors Sent Messages This Summer. They Are One Instruction Set.
Between late June and mid-August, four developments landed in the Luxembourg financial sector. Not all of them were addressed to every entity — one went only to significant…
The Talent Everyone Is Fighting For Is Sitting Three Desks From HR
Organisations are paying half a million dollars for AI talent on the open market. The capability they actually need is already on their payroll — and most of…
The AI Sovereignty Risk Your Board Hasn’t Priced In
On June 12, 2026 — just two days after I spoke at the ILA Tech Governance Conference on AI governance — a US government export control directive ordered…
Why we write. Most of what we know was learned on an engagement, not in a textbook. Publishing it is how you judge our thinking before spending anything.