Appendix
EU Artificial Intelligence Act · Regulation (EU) 2024/1689
European Parliament and Council, 2024. Annex III (high-risk systems), Annex IV (technical documentation), Art. 9 (risk management system).
used in: The blackbox problem is inherited, Neuro-symbolic AI is not a return to the glass box, BVG wants AI to detect danger on U-Bahn platforms
ISACA CISA · Certified Information Systems Auditor
ISACA. Covers IS audit process, governance, risk management, information systems acquisition, development, and implementation.
Auditing Artificial Intelligence · ISACA Journal
ISACA Journal, Vol. 4, 2023. AI audit considerations, control objectives, and evidence gathering for AI deployments.
NIST AI Risk Management Framework (AI RMF 1.0)
National Institute of Standards and Technology, 2023. Govern, Map, Measure, Manage.
NIST AI Resource Center. Living document. Suggested actions per function and category.
GDPR · General Data Protection Regulation (EU) 2016/679
European Parliament and Council, 2016. Art. 5 (principles), Art. 32 (security of processing), Art. 22 (automated decision-making).
ISO/IEC 27001:2013 · Information security management systems
International Organization for Standardization.
NIST SP 800-53 Rev. 5 · Security and Privacy Controls
National Institute of Standards and Technology, 2020. AC-2 (account management), AU-2 (event logging).
BVG Plans to Expand AI Surveillance Cameras · The Berliner
The Berliner, 2026. Reports on BVG's expansion from 16 to 23 U-Bahn stations, the Adesso SE contract, and ongoing talks with Berlin's data protection commissioner.
The Enterprise AI Transformation Guide · Anthropic
Anthropic, 2025. Three-step blueprint for enterprise AI adoption: lay the foundation, launch a pilot, scale impact. Includes governance framework, readiness assessment, and internal case studies from Anthropic teams.
used in: governance before the pilot
Introducing MAI-Cyber-1-Flash inside MDASH · Microsoft
Microsoft AI, July 2026. Launch announcement for MAI-Cyber-1-Flash, a cybersecurity fine-tune of MAI-Code-1-Flash integrated into MDASH. Includes CyberGym benchmark claims and Project Perception preview.
Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost · The Hacker News
The Hacker News, July 2026. Technical breakdown of MAI-Cyber-1-Flash architecture (137B total / 5B active parameters, MoE), MDASH routing design, and benchmark methodology notes including ExploitGym zero scores.
Microsoft unveils MAI-Cyber-1-Flash, promises cybersecurity AI at half the cost · Help Net Security
Help Net Security, July 2026. Coverage of the MAI-Cyber-1-Flash launch and Project Perception public preview scheduled for August 3, 2026.
Okta Signs Definitive Agreement to Acquire Permiso Security · Okta
Okta, July 2026. Official announcement of the Permiso acquisition. Deal structured as an almost all-cash transaction, expected to close Q3 FY2027.
used in: Getting into the network is no longer the hard part
Okta buys AI security startup Permiso; source says for about $200M · TechCrunch
TechCrunch, July 2026. Reports the ~$200M price from a source with knowledge of the deal. Covers Permiso's $18.5M Series A at $80M post-money valuation (April 2024) and the SandyClaw AI agent sandbox platform.
used in: Getting into the network is no longer the hard part