← Back to All Insights

Industry & Regulation

Translate requirements into operational decisions

Follow the standards, regulatory guidance, and institutional developments shaping enterprise AI governance.

For legal, compliance, risk, and technology leaders connecting obligations to accountable implementation.

Layered governance and standards artifacts connected by a controlled evidence path.

Selected sources with Piscys commentary. External publications remain the work of their respective authors.

01 / In Focus

Identity is The Start of Authority

NIST · September 29, 2026

Official Project Update

Software and Agentic AI Identity: NIST’s Next Implementation Step

NIST summarizes feedback on agent identity and authorization and identifies software development as its first implementation use case.

Piscys Lens

Inventory agent identities, delegated permissions, and revocation paths. This project update is not a final mandatory standard.

Read original →

02 / Standards & Guidance

Read The Source. Define The Scope.

Each resource serves a different purpose. Distinguish draft guidance, voluntary frameworks, and management-system requirements before deciding how they apply.

European Commission · Updated July 2026

Draft Guidance

Classifying High-Risk Systems Under The EU AI Act

The Commission’s draft guidelines explain high-risk classification and provide examples for providers and deployers.

Piscys Lens

Begin with the use case and your organization’s role. The linked guidelines are draft and nonbinding; confirm current status before applying them.

Read original →

ISO · 2023 Edition

Standard Overview

ISO/IEC 42001: AI Management Systems

An overview of the requirements for establishing, maintaining, and improving an organizational AI management system.

Piscys Lens

Connect management responsibilities to operational evidence. The public overview is free; the full standard is paid.

Read original →

NIST · July 2024

Voluntary Guidance

Generative AI Profile · NIST AI 600-1

A cross-sector companion to the AI Risk Management Framework for organizing generative AI risk-management activities.

Piscys Lens

Connect each relevant risk-management activity to an accountable owner and evidence from the actual workflow.

Read original →

From Insight to Action

Connect The Requirement To The Workflow

Use an executive briefing to identify which governance questions need clear ownership, stronger evidence, or a defined control boundary.

Request an Executive Briefing

Advisory services are available now. The Piscys software platform is in development.