Insights · The Journal

Thinking, published.

Perspectives, research and field notes from our practice, on artificial intelligence, enterprise software and the discipline of building institutional-grade technology.

Digital Transformation & IT Strategy13 min readSeptember 29, 2026

Business Continuity Planning Beyond IT: The Parts Companies Skip

Most "business continuity plans" are actually just IT disaster recovery plans. What ISO 22301 requires beyond IT, and why testing is where plans fail.

Read article →
AI Governance & Compliance14 min readSeptember 29, 2026

Sovereign AI: Why Countries Are Building Their Own AI Infrastructure

Over $200 billion in sovereign AI investment is now committed across the Gulf alone. What sovereign AI actually means, and why full independence is a myth.

Read article →
Digital Transformation & IT Strategy12 min readAugust 30, 2026

IT Governance Frameworks: COBIT, ITIL, and When Each Applies

COBIT and ITIL get conflated constantly, but they solve different problems. What each framework actually governs, and how they work together.

Read article →
AI Governance & Compliance13 min readAugust 30, 2026

NIST AI Risk Management Framework: A Practical Overview

NIST's AI RMF is voluntary, non-certifiable, and increasingly the shared language for AI governance. What its four functions actually require.

Read article →
AI Governance & Compliance13 min readAugust 22, 2026

ISO 42001 Explained: The New Standard for AI Management Systems

ISO 42001 is the first certifiable AI management system standard. What it actually requires, how certification works, and what it doesn't prove.

Read article →
AI Governance & Compliance13 min readAugust 14, 2026

P(doom), Explained: What the AI Safety Debate Means for Business Risk

P(doom) estimates range from near 0% to 99% among AI researchers. What the term means, why experts disagree, and what it means for business AI risk.

Read article →
IT Strategy & Infrastructure12 min readAugust 12, 2026

Chip Shortages and IT Procurement: Lessons for Future Planning

A new chip shortage is already reshaping IT procurement in 2026, structurally different from 2020's. What businesses should actually do about it.

Read article →
AI Governance & Compliance13 min readAugust 8, 2026

AI Impact Assessments: What They Are and When You Need One

AI impact assessments aren't one thing, FRIA, AIA, and DPIA each mean something different. What each requires, who needs one, and when.

Read article →
Project Management12 min readAugust 8, 2026

Project Recovery: How to Rescue a Failing Project

Most projects don't fail overnight, there's a window to save them. A practical framework for recognizing, assessing, and recovering a troubled project.

Read article →
Cybersecurity12 min readAugust 4, 2026

Multi-Factor Authentication: Why It's Non-Negotiable in 2026

MFA blocks over 99% of account compromise attacks, yet adoption still isn't universal. What MFA does, which methods actually work, and why it matters now.

Read article →

What to expect

The kind of writing worth your time.

01

Perspectives

Considered points of view on the choices facing technology leaders in the region.

02

Research

Structured investigations into emerging models, architectures and operating patterns.

03

Field notes

First-person accounts from engagements, the mistakes, the fixes, the lessons.

04

Whitepapers

Long-form technical documents for the teams doing the actual work.

In the meantime

Read about how we work with institutions.

Explore our practices →