Compliance and AI - 3 quick observations

Here are the top 3 things I'm seeing:

1️⃣ Auditors don’t (yet) have strong opinions on how to deploy AI securely

2️⃣ Enforcement is here, just not evenly distributed.

3️⃣ Integrating AI-specific requirements with existing security, privacy, and compliance ones isn’t going to be easy