.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
Would Your AI Survive a Cross Examination?
by Eric Maass on October 7, 2026 at 2:47 PM
In July 2026, something extraordinary happened. Multiple AI agents, faced with a complex cybersecurity exam, made a conscious decision: cheating would pay off, and they'd help each other do it. Their actions would include setting up a secret communications channel, collaborating on ha …
AI Regulatory Compliance for Banks & Credit Unions Ahead of Exams
by Derek Boczenowski on October 2, 2026 at 1:58 PM
For the past couple of years, AI in financial services has been mostly a policy conversation inside the institution. That is starting to change. Regulators are putting together the materials examiners will use to ask banks and credit unions how they govern AI, and institutions that ha …
Old Policies, New Technology: Is Your Insurance Actually Ready for AI?
by Kelly O’Brien on August 4, 2026 at 12:00 PM
Most business owners have never read their commercial insurance policies front to back. They renew, file the paperwork, and trust that if something goes wrong, they're covered. For years, that quiet trust extended to artificial intelligence too, even though the word “AI” appeared nowh …
“We Don’t Use AI” Is a Claim, Not a Control
by Kelly O’Brien on July 24, 2026 at 1:53 PM
A question we hear often from clients sounds simple on its face: Our company says it doesn’t use AI, and our acceptable use policy says the same. How do we actually prove our employees aren’t using it? It is a fair question, and the honest answer is uncomfortable. A written policy sta …
Shadow IT Is Now Shadow SaaS & Shadow AI: A Practical Cleanup Guide
by Donald Mills on April 22, 2026 at 2:45 AM
If you caught yourself searching "what is shadow IT" this week, you are not alone, and you have probably already lived through it. The term used to conjure rogue modems in a closet, a dusty Access database on somebody's C: drive, or a "just for the team" WiFi router plugged in under a …
We Let AI Run a Penetration Test. Here's What It Got Wrong.
by Jesse Roberts on March 13, 2026 at 12:50 PM
AI is transforming cybersecurity. From threat detection to vulnerability scanning, organizations are racing to integrate artificial intelligence into their security programs. And for good reason. AI tools can scan faster, cover more ground, and work around the clock without fatigue. B …