Enterprise Risk
4 essays tagged “Enterprise Risk”.
10 min read
Governance Under Scale · Part 4
Governance Under Scale — Part IV: Model Selection, NAIC, and the Crosswalk
The NAIC AI bulletin, NIST AI RMF, ISO/IEC 42001, the EU AI Act, and SR 11-7 all require a compliant system, not a compliant model. The crosswalk shows they are one control …
7 min read
Governance Under Scale · Part 3Governance Under Scale — Part III: Revocation and the Reachable Decision Surface
If governance requires the ability to constrain authority, then the critical question is not how a system behaves, but what it remains permitted to do.
5 min read
Governance Under Scale · Part 2Governance Under Scale — Part II: Monitoring Is Not Control
Monitoring provides visibility into system behavior. Governance requires the ability to constrain it.
7 min read
Governance Under Scale · Part 1Governance Under Scale — Part I: Human Override Is Not Governance
Human-in-the-loop is commonly treated as a safety guarantee. Under scale, it becomes a delegation surface, and one of the primary vectors of governance drift.