Research & analysis

31 pieces across nine regulators.

Primary-source analysis of recordkeeping, data, and AI-governance obligations. Filter by regulator or type below.

31 pieces

Abstract digital circuitry representing quantum-resistant cryptographic operations.

NIST

NIST Post-Quantum Cryptography Standards: ML-KEM, ML-DSA, and SLH-DSA Explained

Dwayne ThompsonKingston · Girder Group · September 29, 2026

Abstract architectural diagram, illustrating mathematical structure underlying lattice-based cryptography.

NIST

Lattice-Based Cryptography: How Learning With Errors Powers the Post-Quantum Future

Dwayne ThompsonKingston · Girder Group · September 29, 2026

Cloud infrastructure server environment, illustrating nine-layer quantum-safe migration complexity.

NIST

Nine Layers, One Migration: Securing Cloud Infrastructure Against the Quantum Threat

Dwayne ThompsonKingston · Girder Group · September 29, 2026

Highway infrastructure at night, representing quantum threats to transportation and UAV communication systems.

Engineering & Markets

Drones, Toll Roads, and Connected Vehicles: Post-Quantum Cryptography for Physical Systems

Dwayne ThompsonKingston · Girder Group · September 29, 2026

Interconnected digital nodes, representing blockchain network architecture under quantum threat.

Engineering & Markets

Blockchain's Quantum Reckoning: What Bitcoin, Ethereum, and Cross-Chain Protocols Must Change

Dwayne ThompsonKingston · Girder Group · September 29, 2026

Trucks on a highway at dusk, illustrating a modeled hours-of-service audit preparation.

DOT

Modeled Scenario: A Motor Carrier Cuts ELD Audit Prep From 60 to 20 Hours

Dwayne ThompsonKingston · Girder Group · June 30, 2025

Containers awaiting inspection, illustrating an importer's move to documented UFLPA traceability.

CBP

Early Design Partner: An Importer Moves UFLPA Traceability Off Spreadsheets

Dwayne ThompsonKingston · Girder Group · May 14, 2025

A network operations team at work, illustrating a modeled CPNI access review.

FCC

Modeled Scenario: A Regional Carrier’s CPNI Access Review, From 80 to 30 Hours

Dwayne ThompsonKingston · Girder Group · March 25, 2025

Stacked coins beside a ledger, illustrating broker-dealer financial recordkeeping.

SEC & FINRA

SEC Recordkeeping Requirements for 2026: What Firms Must Retain, and How

Sarah MitchellNew York · Girder Group · January 12, 2025

Abstract processor circuitry, illustrating AI governance in financial services.

FCA & EU

FCA AI Governance Expectations Under a Principles-Based Approach

James OkaforLondon · Girder Group · December 9, 2024

An industrial facility at dusk, illustrating PHMSA hazardous materials documentation.

DOT

PHMSA Hazmat Records: The Documentation Gap in Regulated Transport

Dwayne ThompsonKingston · Girder Group · November 4, 2024

Engineers reviewing code, illustrating reasonable data-security practices under FTC Section 5.

FTC

FTC Act Section 5 and Data: Why ‘Unfair’ Is a Recordkeeping Problem

Sarah MitchellNew York · Girder Group · October 7, 2024

Finished products on a line, illustrating ISO records in manufacturing.

ISO

Why Manufacturers Treat ISO Records as Overhead, Until an Audit

James OkaforLondon · Girder Group · September 30, 2024

A fleet of trucks at a depot, illustrating DOT hours-of-service and ELD records.

DOT

DOT Hours-of-Service and ELD Records: What Motor Carriers Must Keep

Dwayne ThompsonKingston · Girder Group · September 9, 2024

A container port with stacked shipping containers, illustrating FMC demurrage and detention rules.

FMC

FMC Demurrage and Detention Billing Rules: What OSRA 2022 Requires on Every Invoice

Dwayne ThompsonKingston · Girder Group · July 29, 2024

An advisory-firm workspace, illustrating a move from spreadsheets to automated capture.

Engineering & Markets

Early Design Partner: A 45-Person Advisory Firm Moves From Spreadsheets to Automated Off-Channel Capture

Dwayne ThompsonKingston · Girder Group · July 14, 2024

A manufacturing operations floor, illustrating ISO 9001 quality records.

ISO

ISO 9001 in Regulated Manufacturing: Records as the Backbone of Quality

James OkaforLondon · Girder Group · June 11, 2024

An architecture diagram on a screen, illustrating the NIST Cybersecurity Framework 2.0.

NIST

NIST Cybersecurity Framework 2.0: The Govern Function and What Changed

Dwayne ThompsonKingston · Girder Group · April 14, 2024

Abstract data streams, illustrating consent records for TCPA compliance.

FCC

The TCPA Consent Trail: Why Communications Firms Lose Robocall Cases on Records

Sarah MitchellNew York · Girder Group · April 8, 2024

A retail bank branch sign, illustrating off-channel business communications.

SEC & FINRA

FINRA Off-Channel Communication Rules, and Why They Are Reaching Smaller Firms

Sarah MitchellNew York · Girder Group · March 18, 2024

A modern professional-services office, illustrating a modeled brokerage compliance review.

Engineering & Markets

Modeled Scenario: Cutting a UK Brokerage’s Quarterly Compliance Review from 120 to 45 Hours

Dwayne ThompsonKingston · Girder Group · February 28, 2024

A telecommunications network operations centre, illustrating FCC communications compliance.

FCC

FCC CPNI and Data-Breach Rules: What Communications Firms Must Retain

Sarah MitchellNew York · Girder Group · February 19, 2024

An audit meeting in a boardroom, illustrating ISO management-system certification.

ISO

ISO/IEC 42001 and 27001: Building an Auditable AI and Information-Security Management System

James OkaforLondon · Girder Group · February 5, 2024

Cranes loading a container ship, illustrating the records behind a detention dispute.

FMC

Ocean Shipping Reform: The Records Behind a Detention Dispute

Dwayne ThompsonKingston · Girder Group · November 18, 2023

Financial market data on screen, illustrating the cost of compliance.

Engineering & Markets

Compliance Cost as a Share of Revenue: The Mid-Market Gap

Dwayne ThompsonKingston · Girder Group · October 22, 2023

A circuit board in close-up, illustrating compliance engineering for small firms.

Engineering & Markets

AI Compliance Tools for Small Firms: What the Market Gets Wrong

Dwayne ThompsonKingston · Girder Group · August 14, 2023

A data centre aisle, illustrating FTC Safeguards Rule information-security requirements.

FTC

The FTC Safeguards Rule for 2026: What Non-Bank Financial and Data Firms Must Implement

Sarah MitchellNew York · Girder Group · July 15, 2023

A secure server environment, illustrating encrypted-message archiving and capture.

FCA & EU

WhatsApp Archiving: Why Most Firm Archives Are Incomplete

James OkaforLondon · Girder Group · May 6, 2023

A close-up of a processor, illustrating the NIST AI Risk Management Framework.

NIST

The NIST AI Risk Management Framework: Govern, Map, Measure, Manage in Practice

Dwayne ThompsonKingston · Girder Group · March 7, 2023

A government building facade, illustrating customs reasonable-care obligations.

CBP

Customs Compliance in Software: The (a)(1)(A) List and Reasonable Care

Dwayne ThompsonKingston · Girder Group · December 12, 2022

A customs inspection area at a port, illustrating CBP recordkeeping and UFLPA traceability.

CBP

CBP Recordkeeping and UFLPA: What Importers Must Retain, and Trace

Dwayne ThompsonKingston · Girder Group · October 3, 2022