John Z Black

John Z Black Mar 21, 2026 Policy, Law & Governance #ai policy #export controls #security governance #third-party risk #compliance

AI export controls just became operational. Enforcement is moving from policy talk to real cases, and security teams are now in the critical path.

This is a shared-control problem. Legal sets obligations, but security has to enforce access boundaries, monitor asset movement, and preserve evidence quality logs.

If you handle sensitive AI assets, now is the time for strict identity checks, role-based access, transfer controls, and clear escalation for suspicious partner behavior. Compliance asks if rules exist. Security asks if controls hold under pressure.

Read the full story: Read the full operational guide for AI export-control readiness