The Schellman Blog

Over the past year, I've spent a lot of time talking with AI founders, enterprise executives, CISOs, and technology leaders about the opportunities and challenges associated with artificial intelligence. There's an incredible amount of excitement about what AI can do, but there's also a growing recognition that developing powerful technology and getting enterprises comfortable deploying it are two very different things.

Data centers are the most talked-about infrastructure of the AI era. Coverage focuses on power, land, and GPUs. Far less attention goes to what lets a customer trust a facility with sensitive data: independent assurance.

I remember sitting in a Major Firms Group meeting several years ago when Barry Melancon, then CEO of the AICPA, said something that has stayed with me ever since: CPAs have always been in the trust business.

The security field is drowning in two kinds of noise.

GovRAMP (formerly StateRAMP) continues to provide useful avenues for Cloud Service Providers (CSPs) to build secure products for use by State agencies. Earlier this year, GovRAMP released a modified high baseline for CSPs to leverage in protecting the most sensitive SLED data processed by agencies.

Most enterprise leaders have some level of awareness of emerging and upcoming AI regulations that may apply to their organization in the near future. Yet, not all have actually started preparing for enforcement of those regulations to take effect.

Milestone expands Schellman’s sovereign compliance capabilities, helping global organizations consolidate assessment partners and navigate security requirements across regions

If your organization sells cloud-based solutions to state and local police departments, courts, or other criminal justice agencies, you're already familiar with the expectation that Criminal Justice Information Services (CJIS) compliance is essential.