Switzerland's AI Code: The structure is in place, some tools are still missing
The DETEC and OFCOM guide offers a usable structure for an AI code. It becomes effective only with five tools that the document itself does not provide.
Information for boards and executive teams
Perspectives on AI, governance, cybersecurity and digitalisation for boards and executive teams.
ISO/IEC 27090: What the new AI security standard delivers and where it needs the NIST Cybersecurity Framework
The new standard describes twelve ways to compromise an AI system. What it gives the board, and where the NIST Cybersecurity Framework fills the gaps.
Open source in the boardroom: How exposed are our systems?
Around 70 per cent of websites run on PHP, maintained by a foundation with one full-time employee. What this dependency means for the board.
Cybersecurity in the boardroom: we know the risk, yet we wait for the breach.
The swissVR Monitor II/2026 shows more attacks and less reporting to the board. Why boards know the risk and still act only once the damage has occurred.
Which working hours will clients still pay for?
By 2035, 54 per cent of working hours in the United States could be automated. What does that mean for business models that sell services by the hour?
AI in corporate strategy: back to the greenfield
Before the discussion turns to technology and governance, another question is worth asking: how would we build the organisation if we could start again today?
The AI-Generated Information Trap: When AI Systems Negotiate and the Human Only Mediates Between Them
When AI writes the requirements catalogue, the answer and the evaluation, the human is left with the signature. What that means for the Board of Directors.
Strategy Trendslop: When your competitor's AI proposes the same strategy
Language models recommend the same strategies across all providers. What that means for boards and executives, and which check costs nothing.
Complexity and Third Parties: The Pattern Boards Need to Break
The Liechtenstein register hack reveals five patterns that recur across many IT environments, from uneven security to uncontrolled outsourcing.
We Need to Talk: About IT Providers
IT providers recommend from their own portfolio, not from your actual requirement. Governance can manage that information asymmetry, but it cannot remove it.