Policy as Code Musings and News
Subscribe
Sign in
Home
Archive
About
Compliance
Security Governance: Defense In Depth
Thinking through the layers we need to create to fully protect our data, infrastructure, systems, and people
May 22
•
John Brothers
2
Securing Atlassian Rovo: Fine-Grained Policy for AI Agents with PortcullisMCP
A PoC of agent-specific policy in action
May 19
•
John Brothers
1
2
Policy as Code support for the EU AI Act
How can PaC help with compliance?
Apr 14
•
John Brothers
2
2
Permit.IO - MCP Proxy Gateway
This morning, Permit announced an MCP Proxy Gateway. It offers:
Mar 18
•
John Brothers
2
Onyx AI Control Plane - an analysis
A new entrant in the AI authorization space: https://onyx.security/platform .
Mar 17
•
John Brothers
3
1
IronCurtain - AI Policy Enforcement
Enforcing governance of AI is difficult.
Mar 3
•
John Brothers
1
Using Policy as Code to enhance Enterprise Risk Management
Move Up the Stack
Sep 26, 2025
•
John Brothers
1
Are your AI solutions in regulatory compliance? Will that still be true tomorrow?
A strategy to deal with the rapidly changing regulatory environment surrounding AI
May 13, 2024
•
John Brothers
1
Three Challenges in Policy Implementation
Implementing policies in a Policy-as-Code framework presents a new type of complexity, one that many organizations are not well-prepared to address.
Oct 16, 2023
•
John Brothers
1
The Five Main Uses of Policy-as-Code (So far)
I was chatting with someone about Policy-as-Code, and what it was good for.
Oct 3, 2023
•
John Brothers
1
A brief introduction to Policy-as-Code
You may have heard the term “Policy-as-Code”, but I am guessing most people don’t know what it means.
Oct 3, 2023
•
John Brothers
1
This site requires JavaScript to run correctly. Please
turn on JavaScript
or unblock scripts
