blog

Occasional notes on privacy, ISMS work, AI governance, and the unglamorous realities of compliance.