By:
Nick Blackbird
October 12th, 2026
GovRAMP (formerly StateRAMP) continues to provide useful avenues for Cloud Service Providers (CSPs) to build secure products for use by State agencies. Earlier this year, GovRAMP released a modified high baseline for CSPs to leverage in protecting the most sensitive SLED data processed by agencies.
By:
Joe Sigman
October 8th, 2026
Most enterprise leaders have some level of awareness of emerging and upcoming AI regulations that may apply to their organization in the near future. Yet, not all have actually started preparing for enforcement of those regulations to take effect.
By:
Schellman
October 6th, 2026
Milestone expands Schellman’s sovereign compliance capabilities, helping global organizations consolidate assessment partners and navigate security requirements across regions
By:
Jon Coffelt
October 5th, 2026
If your organization sells cloud-based solutions to state and local police departments, courts, or other criminal justice agencies, you're already familiar with the expectation that Criminal Justice Information Services (CJIS) compliance is essential.
Artificial Intelligence | ISO 42001
By:
Danny Manimbo
October 2nd, 2026
If you're building or deploying AI systems, you've likely heard of the numerous governance acronyms flying around, including ISO 42001, EN 18286, AIUC-1. What you may not realize is that each framework addresses a specific purpose, so you likely need to comply with more than one.
By:
Ben Montalbano
September 29th, 2026
California's landmark climate disclosure laws, SB 253 (the Climate Corporate Data Accountability Act) and SB 261 (the Climate-Related Financial Risk Act), have been anything but static since they were first signed in 2023. Deadlines have shifted, a federal appeals court has intervened, and the California Air Resources Board (CARB) is still fleshing out how companies will need to comply.
Artificial Intelligence | ISO 42001
By:
Avani Desai
September 17th, 2026
There have been a lot of conversations about AI safety lately, but one idea really caught my attention: Anthropic CEO Dario Amodei spoke about the need for independent evaluators to have deeper access to AI companies and their models so they can actually test whether the safety measures being put in place are functioning.
By:
Nick Rundhaug
September 10th, 2026
Insights from a conversation with Nick Rundhaug, Managing Director and Federal Practice Leader at Schellman. See his full interview here.