Free executive briefing

The 2026 AI Governance Map

What moved, what's live, and what boards must now prove — with every date cited to a primary source.

Most AI-governance advice is running a year out of date. This briefing corrects the record and gives leadership the current map — useful whether or not you ever call us.

What's inside

  • The deadline that moved. Why the EU's August 2026 “high-risk” cliff became 2027–2028 — and what stayed live anyway.
  • The US patchwork. A dated map of the laws enforceable in 2026 (California, Texas, Illinois, Utah, NYC), Colorado's move to 2027, and the federal preemption fight overhead.
  • The standards are now real. Why ISO/IEC 42001 certification became credible in 2026 — the 42005 and 42006 pieces most people miss.
  • The new frontier. Why your AI inventory now needs an agent layer, and the five controls every agent needs.
  • The board's new duty. AI oversight as fiduciary duty — mapped to the NIST AI RMF Govern function.
  • A 90-day sequence any organization can run: Discover → Govern → Prove.

14 pages · primary-sourced · by Ramon J. Matos, CISSP, ISO/IEC 42001 Lead Implementer.

Get the PDF

Thank you. Your download should begin automatically — if it doesn't, download it here.

No commitment. We'll email it and won't hound you.

After you've read it

Want the map applied to your organization?

The briefing ends where the work begins: knowing what AI you actually have. That's the AI Use Inventory — two to three weeks, one register.

See the AI Use Inventory Discuss Your AI Environment