Practical guidance on HIPAA, security, and compliance — written for the people who actually have to implement it.
August 10, 2026
NIST AI RMF MANAGE 1.1 covers ai risk treatment decisions. This post walks through deciding to deploy, limit or decline, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →August 7, 2026
NIST AI RMF MEASURE 3.1 covers ai risk tracking. This post walks through tracking AI risks that resist measurement, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →August 6, 2026
NIST AI RMF MEASURE 2.11 covers ai fairness and bias. This post walks through testing for bias in a clinical population, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →August 5, 2026
NIST AI RMF MEASURE 2.7 covers ai security and resilience. This post walks through testing an AI system against adversarial input, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →August 4, 2026
NIST AI RMF MEASURE 2.3 covers ai system performance. This post walks through measuring performance on your own population, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →August 3, 2026
NIST AI RMF MEASURE 1.1 covers ai metrics selection. This post walks through choosing metrics that reveal harm rather than only accuracy, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →July 31, 2026
NIST AI RMF MAP 5.1 covers ai impact assessment. This post walks through assessing impact on patients before deployment, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →July 30, 2026
NIST AI RMF MAP 3.4 covers ai benefits and costs. This post walks through weighing clinical benefit against risk, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →July 29, 2026
NIST AI RMF MAP 2.3 covers ai system requirements. This post walks through writing requirements a vendor can be held to, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →July 28, 2026
NIST AI RMF MAP 1.1 covers ai system context. This post walks through documenting the context a model will operate in, with the language of the requirement itself and the evidence an assessor asks to see.
Read more →