Blog · AI, cybersecurity and IT projects
An AI Project Manager’s blog: technology, regulation and IT projects
This AI Project Manager’s blog brings together reflections and practical cases on IT project management, cybersecurity, artificial intelligence and systems architecture, from the intersection of technology, regulation and business.
You’ll find analysis of regulations such as NIS2, DORA and the EU AI Act, real use cases applied to banking and regulated sectors, and reflections on how artificial intelligence is transforming project management and systems administration.
AI Project Manager blog categories
Latest posts from the AI Project Manager blog
-
Cyber Resilience Act: how to report vulnerabilities within 24 hours
The Cyber Resilience Act reporting obligation already applies: 24-hour early warning, 72-hour notification, and it covers products already on the market.
-
How to implement ISO 27001: a practical step-by-step guide
A practical guide to implementing ISO 27001: from management commitment to certification, with the 93 Annex A controls and the most common…
-
Exchange 2016 and 2019 end of support: migration plan
The Exchange 2016 and 2019 ESU programme ends in October 2026 with no further extensions. Risks, options (Exchange SE, Exchange Online or…
-
AI agents for business: how to move from pilot to production
Most companies run AI agent pilots and very few run agents in production. Five conditions and four phases to make the jump…
-
AI regulation in 2026: a year in review
Taking stock of AI regulation in 2026: the EU AI Act made tangible, compliance lessons, regulatory overlap and what comes next.
-
Post-quantum cryptography in banking: why start now
Post-quantum cryptography in banking: the harvest now, decrypt later threat, cryptographic inventory, crypto-agility and how to plan the transition.
-
Patch and vulnerability management under NIS2: who is accountable and with what evidence
What NIS2 requires on vulnerabilities, how to document an exception that holds up, and the evidence an auditor actually asks for.
-
DORA TLPT: threat-led penetration testing in banking
DORA TLPT: what threat-led penetration testing is, how it differs from a pentest, how to prepare, the team involved and turning results…
-
Data governance for AI: the invisible foundation
Data governance for AI: why data quality beats the model, the pillars of governance, data catalogue and lineage, and GDPR/EU Data Act…
-
Immutable backups and ransomware recovery: from plan to rehearsal
What genuinely makes a backup immutable, why ransomware attacks the backup first, and how to move from a continuity plan to a…
-
NIS2 supply chain: how to assess your suppliers
NIS2 supply chain: what the directive requires on suppliers, how to assess them, security clauses, due diligence and governing third-party risk continuously.
-
How to budget an AI project: the hidden costs
How to budget an AI project honestly: the hidden costs, FinOps applied to GenAI, the full life cycle and tying the budget…
Where to start reading this blog
If you’re here for the first time, these are the starting points to understand how I work as an AI Project Manager and how I see the intersection of technology and regulation.
- About me — who I am, my background and how I work.
- AI Forge — artificial intelligence applied to real work.
- Cybersecurity — NIS2, DORA, ENS and a strategic approach.
- IT project management — programme management in regulated environments.
- Systems management — infrastructure, cloud and technical architecture.
Sources and regulatory references
To go deeper into the regulations mentioned in this blog, consult the official sources: DORA Regulation (EU) 2022/2554, NIS2 Directive and the EU AI Act.
If you’d like to discuss any of these topics, head to the contact page.