A newsletter offering a compliance professional's commentary on emerging integrity and compliance risks, including export controls, sanctions, and compliance function budgeting. Issues mix witty, opinionated analysis with takeaways from industry events and regulatory developments.
Website: https://www.alimbay.me/
Analysis of AI agent security, cost and compliance, drawing on benchmarks, industry data and the author's experience building and securing agent platforms. Each issue argues a specific position, such as treating tool surfaces as dependency trees or the context window as a budget.
Severian publishes in-depth technical and regulatory analysis of Microsoft Purview data security, focused on compliance work such as encryption revocation behavior and HIPAA Security Rule readiness. Readers get practitioner-level explanations of how Purview features behave in practice and where they fall short of regulatory requirements.
Explains CMMC Level 2 assessment requirements for small defense contractors, with close readings of NIST SP 800-171A, 32 CFR Part 170 and the CMMC Assessment Guide. Includes practical macOS guidance such as FIPS-validated cryptography and managing Mac fleets with an MSP.
A practitioner-focused newsletter on migrating organizations to post-quantum cryptography, covering regulatory deadlines, standards developments and planning frameworks. Issues pair news such as Let's Encrypt's Merkle Tree Certificates commitment and CNSA 2.0 timelines with concrete guidance for migration programs.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
