The Schellman Blog

Data centers are the most talked-about infrastructure of the AI era. Coverage focuses on power, land, and GPUs. Far less attention goes to what lets a customer trust a facility with sensitive data: independent assurance.

I remember sitting in a Major Firms Group meeting several years ago when Barry Melancon, then CEO of the AICPA, said something that has stayed with me ever since: CPAs have always been in the trust business.

The security field is drowning in two kinds of noise.

GovRAMP (formerly StateRAMP) continues to provide useful avenues for Cloud Service Providers (CSPs) to build secure products for use by State agencies. Earlier this year, GovRAMP released a modified high baseline for CSPs to leverage in protecting the most sensitive SLED data processed by agencies.

Most enterprise leaders have some level of awareness of emerging and upcoming AI regulations that may apply to their organization in the near future. Yet, not all have actually started preparing for enforcement of those regulations to take effect.

Milestone expands Schellman’s sovereign compliance capabilities, helping global organizations consolidate assessment partners and navigate security requirements across regions

If your organization sells cloud-based solutions to state and local police departments, courts, or other criminal justice agencies, you're already familiar with the expectation that Criminal Justice Information Services (CJIS) compliance is essential.

If you're building or deploying AI systems, you've likely heard of the numerous governance acronyms flying around, including ISO 42001, EN 18286, AIUC-1. What you may not realize is that each framework addresses a specific purpose, so you likely need to comply with more than one.