#governance

#governance

Two years ago, the Express team initiated a complete revamp of the project's governance. What was once a largely single-maintainer effort under Doug Wilson evolved into a structured Technical Committee (TC) with multiple active contributors. "Our goal was to evolve Express from a single-maintainer project into a sustainable, community-driven effort - one built on shared responsibility, clear processes, and long-term vision," Ulises explained.

Anthropic has completely overhauled the "Claude constitution", a document that sets out the ethical parameters governing its AI model's reasoning and behavior. Launched at the World Economic Forum's Davos Summit, the new constitution's principles are that Claude should be "broadly safe" (not undermining human oversight), "Broadly ethical" (honest, avoiding inappropriate, dangerous, or harmful actions), "genuinely helpful" (benefitting its users), as well as being "compliant with Anthropic's guidelines".

In that experience I came away thinking that associations could actually be stronger for their members if they had voluntary membership, Cofano said. A lot of members view their dues as a tax and that creates this negative tension between members and the organization, and that is always an uphill battle in delivering value. In many parts of the country; however, it was challenging to untie Realtor membership with MLS access, Cofano said, preventing any sort of meaningful change.

To all employees, this company takes data protection very seriously. It has a material impact on our operations. The CIO and IT Director are in charge of those policies. If one of them comes to your business unit and gives you an instruction, take it as seriously as you would instructions from any other C-level, including myself. As of this date, know this: If you disregard or otherwise violate any IT instruction, you better pray that they are wrong.

I've seen this before-many times, in fact. What you're describing is not unheard of in the nonprofit sector. Founder energy is one of the most powerful forces driving new missions into the world. It can also be one of the riskiest. Many organizations, especially those built from lived experience, passion, and necessity, begin with little more than a vision, a problem to solve.

The AI gold rush has put new pressure on governments and other public agencies. As enterprises look to gain a competitive advantage from emerging technologies, governing bodies are eager to implement rules and regulations that protect individuals and their data. The most high-profile AI legislation is the EU's AI Act. However, global law firm Bird & Bird has developed an AI Horizon Tracker that analyzes 22 jurisdictions and presents a broad spectrum of regional approaches.

Whenever the conversation turns to AI's role in cybersecurity, one question inevitably surfaces - sometimes bluntly, sometimes between the lines: "If AI can spot patterns faster than I can, will it still need me?" It's a fair question - and one that reflects a deeper anxiety about the future of security careers. AI is everywhere now: embedded in email gateways, SOC workflows, identity systems, and cloud defenses. But here's the truth: AI isn't erasing security roles. It's reshaping them.

The result is an explosion of AI capabilities across the SaaS stack, a phenomenon of AI sprawl where AI tools proliferate without centralized oversight. For security teams, this represents a shift. As these AI copilots scale up in use, they are changing how data moves through SaaS. An AI agent can connect multiple apps and automate tasks across them, effectively creating new integration pathways on the fly.

It is becoming increasingly difficult to separate the signal from the noise in the world of artificial intelligence. Every day brings a new benchmark, a new "state-of-the-art" model, or a new claim that yesterday's architecture is obsolete. For developers tasked with building their first AI application, particularly within a larger enterprise, the sheer volume of announcements creates a paralysis of choice.

AI will help us navigate the immense amounts of information and data created every day in the modern world, but it will also make it easier for bad actors to swamp the infosphere with disinformation. AI can enable real-time translations to spread ideas seamlessly across language barriers, but it may also make the marketplace of ideas less pluralistic by concentrating power in a few individuals.

Many of the weaknesses which we have reported here in the report are not new. They are long-standing issues that have persisted, some of which over many years. The pace of improvement has not matched in some cases the scale of the challenge facing the authority around a number of these matters. Without urgent and sustained action and clear accountability the council risks remaining in a cycle, in my view, of statutory intervention and limited assurance.

A report by the Public Accounts Committee (PAC) has highlighted "serious governance issues" with the Department of Culture's oversight of state bodies, after the Arts Council's failed IT project.

Advocates for geoengineering-or, at a minimum, of pursuing research into geoengineering-say that such risks impose obligations. They note that, since attempts to limit warming have failed, it's incumbent on humanity to consider all the options. "If sunlight reflection could save lives and protect the environment, it is at least worth discussing," David Keith and Zeke Hausfather, both climate scientists, wrote in a recent essay for the Times. "I don't think we have the luxury of saying there are certain options we don't explore and study," Yedvab, the co-founder of Stardust, said. "Just as a metaphor, if there is one person in a household who's in a crisis, you want to make sure that you have all the options in front of you of how to deal with this crisis."

Every company has different internal dynamics and different ways of working, right? says Kariem Abdellatif, the head of Mercator by Citco (Mercator), a specialist entity management provider that helps organizations manage their global entity portfolios, including during complex M&A transactions. So the system you set up has to be able to accommodate those differences, and the entire governance framework for managing entities needs to be flexible enough to handle not just the current complexity, but also future organizational changes.

So, picture a moment when a new source of information comes online, turns into a go-to for people everywhere, sometimes to the chagrin of professors and bosses, but becomes a household name and really changes the internet. So we're doing AI again. Actually I am talking about Wikipedia, the online crowdsourced encyclopedia, which for a long time generated a lot of skepticism, but today is actually seen as a pretty trusted source of information. It's an example of an organization that actually created something positive on the internet.

AI can be used both for and against the public interest within democracies. It is already being used in the governing of nations around the world, and there is no escaping its continued use in the future by leaders, policy makers, and legal enforcers. How we wire AI into democracy today will determine if it becomes a tool of oppression or empowerment.

Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging. At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

Artificial intelligence (AI) holds tremendous promise for improving cyber defense and making the lives of security practitioners easier. It can help teams cut through alert fatigue, spot patterns faster, and bring a level of scale that human analysts alone can't match. But realizing that potential depends on securing the systems that make it possible. Every organization experimenting with AI in security operations is, knowingly or not, expanding its attack surface.

Ruby Central, the non-profit that recently seized some Ruby open source tools from maintainers, is transferring the repository ownership of RubyGems and Bundler to the Ruby core team. The move appears to be an attempt to mollify the Ruby community following a divisive power grab, but it does not restore the control of those tools to the maintainers who previously oversaw them.

Cloud computing forms the backbone of our increasingly digital world, enabling businesses to operate more efficiently, grow faster, and innovate with flexibility. Despite its advantages, the cloud is not immune to data breaches caused by weak security practices. Alarmingly, some of the biggest risks do not stem from technical errors or malicious hackers but from the very people responsible for protecting cloud resources: security professionals themselves.