https://www.edwin-luther.io/insights Practical notes on EU AI Act, DORA, ISO/IEC 42001, and AI governance for financial services boards, from Edwin Luther, Fractional FCC & Enterprise Risk Leader. en-gb Thu, 03 Sep 2026 00:00:00 GMT https://www.edwin-luther.io/insights/eu-ai-act-2026-uk-boards https://www.edwin-luther.io/insights/eu-ai-act-2026-uk-boards Most high-risk obligations are now live. What your board needs in place, and the practical first step. Thu, 03 Sep 2026 00:00:00 GMT me@edwinluther.io (Edwin Luther) https://www.edwin-luther.io/insights/dora-third-party-ai-risk-checklist https://www.edwin-luther.io/insights/dora-third-party-ai-risk-checklist What a board should ask an AI vendor before approval, and where unapproved AI quietly becomes a DORA problem. Thu, 03 Sep 2026 00:00:00 GMT me@edwinluther.io (Edwin Luther) https://www.edwin-luther.io/insights/compliance-by-design-vs-retrofitting https://www.edwin-luther.io/insights/compliance-by-design-vs-retrofitting The asymmetry between building governance in from day one and bolting it on after a regulator forces the issue, in real numbers. Thu, 03 Sep 2026 00:00:00 GMT me@edwinluther.io (Edwin Luther) https://www.edwin-luther.io/insights/iso-iec-42001-explained https://www.edwin-luther.io/insights/iso-iec-42001-explained The clearest available reference architecture for what good AI governance looks like, and why it matters before it's mandatory. Thu, 03 Sep 2026 00:00:00 GMT me@edwinluther.io (Edwin Luther) https://www.edwin-luther.io/insights/ai-compliance-for-smes https://www.edwin-luther.io/insights/ai-compliance-for-smes What actually applies to a business without a compliance department, and what a proportionate response looks like. Thu, 03 Sep 2026 00:00:00 GMT me@edwinluther.io (Edwin Luther)