Latest about Grasp.

Continuous monitoring vs periodic audits: seeing AI change as it happens

An audit tells you what your AI looked like on one day. Continuous monitoring tells you what changed the next. The difference — and when each matters.

Ruben AltenaSep 8, 2026 · 6 min read

Shadow AI statistics 2026: the numbers every security leader should know

How widespread is shadow AI in 2026, what it costs, and where the real gap is — the key statistics, with their sources.

Ruben AltenaSep 7, 2026 · 5 min

Your company's biggest AI power user isn't in engineering

Security teams lock down the dev team's AI tools while the real exposure walks in through marketing, sales, legal and the C-suite. Here's why you're watching the wrong door — and what to do about it.

Ruben AltenaAug 4, 2026 · 5 min

How to write an AI acceptable use policy your team will actually follow

An AI acceptable use policy beats a ban every time. What to include, the full two-page structure, and the mistake that makes most of them fail.

Ruben AltenaJun 22, 2026 · 4 min

AI and GDPR: where the two regimes overlap for European companies

AI and GDPR overlap the moment a tool touches personal data, and passing one regime does not mean passing the other. Here is how the two align.

Ruben AltenaJun 22, 2026 · 5 min

How to build an approved AI tools list that speeds adoption up

An approved AI tools list, or allowlist, manages risk and speeds adoption at once. How to build one and keep it from going stale, step by step.

Ruben AltenaJun 22, 2026 · 4 min

NIST AI Risk Management Framework explained, and how it fits the EU AI Act

NIST AI RMF is the voluntary standard many firms use to govern AI risk. Its four core functions, and how it fits with the EU AI Act, explained.

Ruben AltenaJun 22, 2026 · 4 min

What is ISO 42001? The AI management system standard, explained

ISO 42001 is the first standard for any AI management system. What it covers, how it differs from ISO 27001, and why it suddenly matters today.

Ruben AltenaJun 22, 2026 · 4 min

From 30-day compliance reviews to same-day AI approval

Your AI approval takes thirty days. Your competitors take just a day. Here is how to turn compliance review from a bottleneck into a fast lane.

Ruben AltenaJun 16, 2026 · 3 min