We built Vivid Risk for the CISO's side: a readiness assessment with a citation on every scored control, for your jurisdiction. It scores what you tell it, is not a certification and files nothing.
Which of the six does your board ask about least?
https://t.co/ZM9LjqA0rh
The same incident. A different question.
A security manager asks: is it handled?
A CISO asks: can we stand behind it, to the board, the regulator and the customer?
Six places where the question changes 🧵
6. AI
Manager: which AI tools are staff using?
CISO: which of our AI systems is high-risk, and what do we owe as its deployer?
Under the EU AI Act, a deployer's duties are set system by system.
And watch your proposals. "Preparing for NIS2" is accurate. "NIS2 compliant" is a claim Irish law gives no test for yet.
Check your own scope free, no account, nothing stored:
https://t.co/w7YBbcNv3D
One step this week: write down what you'd tell a client at 2am if their incident started in your tooling. Who calls whom, within what window, with what evidence.
Last month we launched two workspaces at Vivid Risk:
• the Compliance Workspace, for running cyber compliance through the year
• the AI Act Workspace, for organisations that use AI
Built for Ireland, the UK and the EU. 🧵
The AI Act Workspace: a register of the AI systems you use, a guided path through the Act one article at a time, your own classification with your reasoning, and the duties for your role with citations.
From €35/month excl. VAT. One AI system is free, no card.