The Audit Room
Insights on compliance, AI, security, and governance.

The Cyber Resilience Act Explained: What Software and Technology Companies Need to Know
Latest articles

Kodex Compliance at Venturethon 10
Jeremiah Matador, Founder and CEO of Kodex Compliance, will be pitching at Venturethon 10 with Soonami. Kodex Compliance helps startups and growing teams identify compliance gaps, organise evidence and prepare for customer, investor and regulatory expectations with a clear, practical approach.

The EU AI Act Was Postponed. Here Is What Actually Changed
The EU AI Act has not been cancelled. It has not disappeared. But part of its timeline has changed.

The EU AI Act: What It Is, What It Means, and Why You Cannot Ignore It
The world's first comprehensive legal framework for artificial intelligence is now in force. The EU AI Act (Regulation (EU) 2024/1689) is not a proposal, a recommendation, or a voluntary code of conduct. It is binding law. If your business develops, deploys, imports, or distributes AI systems that affect people in the European Union, this regulation may apply regardless of where your company is headquartered.

Evidence readiness for the European Union Artificial Intelligence Act
A practical guide to the evidence teams need before they can treat European Union Artificial Intelligence Act readiness as more than a checklist.

Why compliance questionnaires should be generated from context
Static questionnaires create noise. Context generated questionnaires can ask fewer questions and still collect stronger evidence.

Documentation score and implementation score should not be the same
A single compliance percentage hides the difference between written process and working control evidence.

Supplier compliance reviews need a clear working flow
The supplier path should move from invite to assessment, review, resubmission, approval, and certificate without losing context.

Audit packs should be frozen records, not live screens
A final audit pack needs stable evidence, dates, scores, and reviewer decisions so it can support later review.
Stay ahead of the curve
Practical notes on regulation changes, evidence readiness, supplier review, and audit pack design. No account needed, just your email.
Or follow with RSS