Welcome to the August 2026 Edition of Anekanta® AI Insights Newsletter
Originally published on LinkedIn 13 August 2026. 23 earlier newsletter editions are currently accessible on LinkedIn.
Estimated reading time: 11 minutes
Dear Readers,
Welcome to the August 2026 edition of Anekanta® AI Insights newsletter for enterprise business leaders focused on AI strategy, risk, literacy and governance.
The EU AI landscape has moved significantly over the past month. The Digital Omnibus Regulation (EU) 2026/1744 has revised the timetable for high-risk AI. The first European quality management standard EN 18286, developed specifically to support implementation of the AI Act has been published by CEN/CENELEC and is pending OJEU citation, the Act’s transparency requirements are now in application and AI literacy obligations simplified.
For boards and senior leaders, the direction is becoming clearer. The challenge is how to integrate jurisdiction-specific requirements into an organisation-wide AI governance system without creating duplicated controls, unnecessary cost or fragmented accountability.
This month our feature article focuses in on that implementation challenge.
In this issue:
- High-Risk AI and Global AI Governance – how the EU AI Act’s product-centric conformity requirements can be integrated with ISO/IEC 42001 and wider enterprise governance.
- Anekanta® featured by leading security domain publisher Security on Screen – the first two instalments in a three-part exclusive interview series with Anekanta®’s Founder and CEO
- AI transparency and literacy after the Digital Omnibus – what changed, what did not, and what organisations should be doing now.
- The questions boards are asking now – moving from AI visibility towards classification, decision rights and demonstrable control.
- September AI Literacy and Governance Workshop – our next open CPD-certified session, hosted by ISACA London Chapter on 23 September 2026.
Feature Article: High-Risk AI – Integrating EU AI Act Conformity into Global AI Governance
The new application dates buy time. Yet for many organisations, fundamental questions about cross-jurisdictional AI governance remain unanswered.
For enterprises providing AI systems across the use cases identified in the eight Annex III areas, the challenge extends beyond understanding when the EU AI Act’s high-risk requirements apply.
The more important question is how a product-centric regulatory structure should be integrated into global AI governance without creating parallel systems, duplicated controls and unnecessary cost.
An organisation may already have mature AI policies, governance structures and an AI management system, yet still be unable to demonstrate that an individual high-risk AI system satisfies the legal requirements applicable to it.
This creates a different set of executive questions: Which systems are in scope? What role does the organisation occupy in the AI value chain? What evidence is required? Where does responsibility sit? How will conformity be maintained throughout the system lifecycle?
The publication of EN 18286:2026 by CEN/CENELEC, the first European quality management standard developed specifically to support implementation of the EU AI Act, provides an important new part of the answer.
Our feature article examines how EN 18286 may connect with ISO/IEC 42001 and wider global AI governance, creating an integrated assurance architecture rather than another regulatory silo. Presumption of conformity will attach only once the standard is cited in the Official Journal.
For boards, the implementation opportunity is clear: classify accurately, allocate responsibility, secure the evidence chain and build governance capable of supporting system-level assurance before the Annex III requirements take effect on 2 December 2027, and the Annex I requirements on 2 August 2028.
👉 Read: High-Risk AI — Integrating EU AI Act Conformity into Global AI Governance
Anekanta® Featured by Security on Screen: Three-Part Interview Series
This series helps to demystify some of the issues, offers insight into the EU AI Act and what it does, discusses adoption, implementation and trust, and gives some advice on regulation and governance
Security on Screen, a leading international security publication, is running a three-part thought-leadership interview series with Anekanta® Founder and CEO Pauline Norstrom, examining AI regulation, adoption, trust and the changing role of AI within the security sector and wider enterprise. Parts One and Two are now live.
Part One – Understanding the EU AI Act and High-Risk AI
The first interview looks at what the EU AI Act means in practice, including its risk-based structure, the obligations applying to high-risk AI and the importance of AI literacy across organisations using AI.
Pauline also explains Anekanta®’s approach to trustworthy AI through four connected pillars – strategy, risk, literacy and governance – and considers the growing role of ISO/IEC 42001 as enterprises seek consistent, measurable governance and greater confidence across procurement and supply chains.
👉 Read Part One: Exclusive interview — Anekanta’s Pauline Norstrom
Part Two – AI Adoption, Trust and Enterprise-Scale Implementation
Part Two moves from regulation into implementation. It examines what “AI-enabled” actually means, how organisations can distinguish genuine capability from marketing claims, and why AI investment needs to demonstrate measurable operational or customer benefit.
The discussion also explores trust as an evidence question, the importance of human oversight and AI literacy, and the move from isolated AI-enabled products towards enterprise-scale AI architectures connecting previously separate systems and data.
The key message is that the next stage of AI advantage will come from organisations able to combine technology, data, governance and human decision-making at scale.
👉 Read Part Two: Anekanta’s Pauline Norstrom — Part 2
Part Three of the series will follow shortly.
EU AI Act Update: Transparency and AI Literacy After the Omnibus
Two obligations deserve particular attention following the Digital Omnibus because they affect organisations well beyond Annex III high-risk AI.
AI transparency requirements are now in application
The Article 50 transparency requirements began applying on 2 August 2026.
They address several situations in which people need to know that AI is involved, including direct interaction with AI systems, AI-generated or manipulated content, emotion recognition and biometric categorisation, deepfakes and certain AI-generated text concerning matters of public interest.
The Omnibus introduced a limited transition rather than a general postponement.
For generative AI systems placed on the market before 2 August 2026, the Article 50(2) marking and detection requirement benefits from a transition until 2 December 2026. Content generated before 2 August does not have to be labelled retrospectively, although voluntary disclosure remains encouraged.
The Commission has also published Article 50 guidelines and a voluntary Code of Practice on Transparency of AI-Generated Content, giving providers and deployers a more structured route for implementing relevant marking and labelling requirements.
For enterprises, transparency should now form part of AI system design, procurement, communications and governance rather than being treated solely as a content-labelling exercise.
AI literacy remains an organisational obligation
The Digital Omnibus also amended Article 4.
The revised provision requires providers and deployers to take measures to support the development of AI literacy among staff and others operating or using AI systems on their behalf. The organisation must take account of factors including technical knowledge, experience, education, training, the context in which the AI is used and the people affected by it.
Importantly, the amended wording makes clear that providers and deployers are not required to guarantee a particular level of AI literacy for every individual.
This creates a more proportionate obligation, but it does not remove the requirement.
The Commission’s current guidance confirms that organisations should still be able to demonstrate measures appropriate to their AI use and workforce.
Generic AI training does not automatically discharge the obligation. The organisation must equip the people making, approving, procuring, operating and overseeing AI decisions with knowledge appropriate to their responsibilities and to the risks of the systems concerned.
The obligation itself is not new. Article 4 has applied since 2 February 2025, and national market surveillance authorities acquired supervision and enforcement powers in early August 2026
AI Literacy and Governance Workshop – 23 September 2026
The changing EU AI Act timetable has increased the opportunity to prepare properly. It has also made informed leadership more important.
Boards and senior leaders need sufficient AI literacy to challenge investment proposals, understand system limitations, recognise regulatory classifications, allocate decision rights and determine what evidence they should require before an AI system is approved for deployment.
Anekanta®’s AI Literacy and Governance Workshops move beyond introductory awareness into practical governance and decision-making.
The full-day, CPD-certified programme applies Anekanta®’s AI Governance Framework and international standards to real enterprise situations and is designed for boards, senior leaders, technology executives, risk owners, auditors and governance professionals.
Topics include:
- AI opportunity, capability and limitations
- governance and board accountability
- practical risk and impact evaluation
- decision rights and human oversight
- EU AI Act roles and requirements
- ISO/IEC 42001 and enterprise AI management systems and
- moving from governance principles to operational evidence
Next open workshop
23 September 2026 Hosted by ISACA London Chapter book now to avoid disappointment.
In-house workshops
This is also an opportunity for organisations considering booking an in-house board session or enterprise workshop to experience Anekanta®’s approach in a professional environment.
Three Questions Boards and Senior Leaders Are Asking Now
The questions around enterprise AI are becoming more specific.
Visibility remains important, but leadership attention is increasingly moving towards classification, accountability and evidence.
1. Which of our AI systems carry material legal or enterprise risk?
Boards need to understand not just what systems are in place but why systems are being used, which decisions or processes they influence, what their intended purpose is, who may be affected and whether use within a particular jurisdiction changes the organisation’s obligations.
For those operating in Europe, this includes understanding whether particular AI use cases meet the criteria for high-risk classification and whether the organisation is acting as provider, deployer or another operator in the AI value chain.
The board needs visibility of the AI portfolio translated into a meaningful risk and responsibility position.
2. Who has the authority to make the important AI decisions?
AI governance becomes operational through decision rights. These include: Who can approve a system for use? Who can challenge its classification? Who can accept residual risk? Who decides whether a change is sufficiently material to require reassessment? Who can stop deployment following an incident or unexpected system behaviour?
Committees and policies are useful only where authority is clear.
Boards should agree where AI decision rights sit, how they have been delegated and where material decisions return for executive or board oversight.
3. Can we prove that our AI governance works?
The direction of travel across regulation, standards, procurement and assurance is towards evidence.
An organisation may have policies, principles and committees, but customers, auditors, regulators and enterprise buyers increasingly need to understand what controls actually operate.
That evidence may include AI inventories, classifications, risk and impact assessments, training records, supplier assurance, system testing, approvals, monitoring, incident management and board oversight.
For high-risk AI, the evidence requirement becomes considerably more system-specific.
The strategic question is therefore moving from “Do we have AI governance?” to “Can we demonstrate control of the AI systems for which we are responsible?”
Anekanta® helps boards and senior leaders answer these questions through AI strategy, risk intelligence, literacy, governance, ISO/IEC 42001 and EU AI Act readiness.
How Anekanta® Can Help
Anekanta® works with boards, executive teams, providers and deployers of AI to build trusted, commercially viable AI adoption.
Our specialist work includes:
AI Strategy and Governance Connecting AI investment and use to business objectives, board accountability and measurable governance.
AI Literacy Developing appropriate competence from board level through to teams responsible for procuring, developing, operating and overseeing AI.
EU AI Act High-Risk AI Supporting classification, provider and deployer analysis, risk and impact assessment, conformity readiness and lifecycle governance.
ISO/IEC 42001 Designing and preparing enterprise AI management systems capable of supporting consistent governance across jurisdictions.
AI Risk Intelligence™ Applying Anekanta®’s specialist systems and frameworks to identify and evaluate AI risks, impacts and governance requirements.
Request our specialist advisory services
Whether your organisation is building its first enterprise AI governance architecture, preparing for ISO/IEC 42001, evaluating high-risk AI systems or determining how EU AI Act requirements integrate into global operations, Anekanta® can help establish a structured path forward.
About Anekanta®
Anekanta® was established in 2016. Since 2020, we have developed specialist AI strategy, risk, literacy and governance services for boards, senior leaders and organisations developing and deploying AI.
Our 12 Principles of AI Governance were developed specifically for board-level application and pre-date ISO/IEC 42001. The framework has been recognised through international and UK initiatives and continues to underpin our approach to accountable, measurable AI governance.
Anekanta® has also developed specialist AI Risk Intelligence Systems™ featured by the OECD and UK Government, for high-risk AI, biometrics and EU AI Act readiness, supporting our work across system classification, impact, risk and assurance.
Our focus is practical: helping organisations connect AI opportunity with the governance, evidence and executive decision-making required to adopt it with confidence.
The Anekanta® Team
Anekanta® AI Insights Newsletter is Copyright Anekanta® 2016-2026. All rights reserved. Anekanta® is a registered trademark.
Professional Disclaimer: The information provided here is for general informational purposes only and does not constitute legal, regulatory, financial or professional advice. Any reliance placed on the information is strictly at the user’s own risk. Professional advice should be sought in relation to specific circumstances or through a formal engagement with Anekanta®.
Use of Generative AI: Generative AI tools may be utilised in research and drafting processes. All published materials are subject to substantive human review, professional judgment and oversight prior to release.
Subscribe to receive Anekanta® AI Insights by email. You can unsubscribe at any time. Privacy Policy.
Anekanta®AI and Anekanta®Consulting
AI Strategy | Risk | Literacy | Governance
Contact us | Explore our services | Subscribe to our newsletter | Follow us on LinkedIn
Intellectual Property: © 2016–2026 Anekanta®. All rights reserved. Unless otherwise expressly stated, all materials published on this website, including the Anekanta® AI Governance Framework for Boards, the 12 Principles, and all AI risk and impact evaluation methodologies, software, models, diagrams, text and materials, are proprietary intellectual property of Anekanta®. No reproduction, adaptation, distribution, or commercial exploitation is permitted without prior written authorisation. No rights are granted other than those expressly stated. The Anekanta® AI Governance Framework and 12 Principles are developed, maintained and continuously enhanced as part of Anekanta®’s proprietary governance architecture.
Professional Disclaimer: The information provided on this website is for general informational purposes only and does not constitute legal, regulatory, financial or professional advice. Any reliance placed on the information is strictly at the user’s own risk. Professional advice should be sought in relation to specific circumstances through a formal engagement with Anekanta®.
Use of Generative AI: Generative AI tools may be utilised in research and drafting processes. All published materials are subject to substantive human review, professional judgment and oversight prior to release.
