Enterprise AI Risk

Enterprise risk and resilience for AI, assurance, continuity, mitigation, and operational safeguards.

Digital Alibi

The Review Published in July. Nobody Has Asked What Happened to It Since.

Aug 30, 2026

•

2 min read

The Review Published in July. Nobody Has Asked What Happened to It Since.

The Mills Review made seven recommendations to the FCA Board in July. Seven weeks on, none has a confirmed timeline. The senior managers waiting to find out are waiting for a question nobody in this sector seems to be asking.

Ivan Roche

Board Accountability

Four Named Companies and a Date That Cannot Be Reargued

Aug 9, 2026

•

3 min read

Four Named Companies and a Date That Cannot Be Reargued

The Critical Third Parties regime just demonstrated, at system level, the difference between a power that exists and an accountability that has been fixed.

Ivan Roche

Technology Leadership

Naming an Owner Is Not Proof One Existed

Jul 19, 2026

•

3 min read

Naming an Owner Is Not Proof One Existed

This month, three institutions told boards to assign accountability. None of them said how to prove it was there before the fact.

Ivan Roche

Digital Alibi

+10

Jun 29, 2026

•

3 min read

Uninsurable

Commercial insurers have arrived at the same question as the Article 65 investigation standard. They are asking for evidence, not documentation.

Ivan Roche

Fiduciary Liability

Four Questions Every NED Should Ask Before the Summer Recess

Jun 2, 2026

•

5 min read

Four Questions Every NED Should Ask Before the Summer Recess

Approving a governance framework is a procedural obligation. Verifying that it produces a reconstructible record is a governance one. The distinction matters, and it falls squarely on the NED.

Ivan Roche

Fiduciary Liability

May 11, 2026

•

4 min read

The Retrievability Test

How to Audit Your Organisation's AI Governance Readiness

Ivan Roche

Enterprise AI Risk

The Review Published in July. Nobody Has Asked What Happened to It Since.

Four Named Companies and a Date That Cannot Be Reargued

Naming an Owner Is Not Proof One Existed

Uninsurable

Four Questions Every NED Should Ask Before the Summer Recess

The Retrievability Test

The Roche Review

Home