regulation.

The compliance stack is thickening — NIS2, DORA, the AI Act, CRA, CER — and each brings its own operator obligations. This tag collects our practical reads on what each regime actually asks of engineering teams, board briefings on new triggers, and the crossovers where a single control has to satisfy three regulators at once. No compliance theatre — just the operating changes.

1 post on regulation. Also available as an RSS feed — filter by tag in your reader.