A consultant's newsletter on European compliance, data protection, information security and digital sovereignty, mixing legal analysis of EU rules (such as the EDSA opinion on smart glasses) with political commentary on transatlantic relations. Readers get practical guidance on regulatory obligations and a sourced, opinionated view of Europe's strategic dependence on the US.
Website: https://www.mrak.at/
Analysis of AI agent security, cost and compliance, drawing on benchmarks, industry data and the author's experience building and securing agent platforms. Each issue argues a specific position, such as treating tool surfaces as dependency trees or the context window as a budget.
Severian publishes in-depth technical and regulatory analysis of Microsoft Purview data security, focused on compliance work such as encryption revocation behavior and HIPAA Security Rule readiness. Readers get practitioner-level explanations of how Purview features behave in practice and where they fall short of regulatory requirements.
Explains CMMC Level 2 assessment requirements for small defense contractors, with close readings of NIST SP 800-171A, 32 CFR Part 170 and the CMMC Assessment Guide. Includes practical macOS guidance such as FIPS-validated cryptography and managing Mac fleets with an MSP.
A practitioner-focused newsletter on migrating organizations to post-quantum cryptography, covering regulatory deadlines, standards developments and planning frameworks. Issues pair news such as Let's Encrypt's Merkle Tree Certificates commitment and CNSA 2.0 timelines with concrete guidance for migration programs.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
