AI Literacy for Regulated Firms
Article 4 of the EU AI Act, translated into what your staff must actually know
Category
Operational resilience
DORA, ICT third-party risk, and testing that the plan survives contact.
Internal Audit in the Age of AI
Auditing model-driven processes without pretending to be a data scientist
DORA Operational Resilience Essentials
ICT risk, third-party registers, and what your board is now accountable for
Third-Party Risk Registers That Survive an Inspection
What goes in the register, who owns it, and how it is kept true
Reporting a Major ICT Incident
The clock, the classification, and the three reports you owe
Anti-Money Laundering Fundamentals
Customer due diligence, suspicious activity, and the report you must not tip off
Sanctions Screening in Practice
Lists, false positives, and the escalation nobody wants to make
Spotting Payment Fraud
Invoice redirection, authorised push payments, and the call that is not the CFO
GDPR for People With a Day Job
Lawful basis, subject rights, and what to do in the first hour of a breach
International Data Transfers After Schrems II
Standard clauses, transfer impact assessments, and honest supplementary measures
Security Awareness That Changes Behaviour
Phishing, pretexting, and why annual click-through training does nothing
The First Hour of an Incident
Triage, evidence, and communications while everything is still unclear