Passkeys are a modern authentication method designed to replace traditional passwords. Passkeys use cryptographic key pairs — public and private keys — to provide a more secure way to log in to websites and applications. The private key is securely stored on the user’s device, typically within a hardware security module (HSM), trusted platform module (TSM), or a secure enclave, while the corresponding public key is stored on the service’s server. By eliminating the need for passwords, passkeys help reduce the risk of phishing attacks, credential theft, and exposure of user credentials through password dumps. Passkeys often rely on the FIDO2 authentication standards, which provide a secure, passwordless login experience. ...

A One-to-One meeting, or 1:1 meeting, is a management and career development technique designed to foster open communication, strengthen relationships, and support professional growth in a team environment. At their core, 1:1 meetings (1:1s) are regular, private discussions between a manager and a team member designed to build trust, provide feedback, and encourage development. 1:1s create a dedicated space for meaningful dialogue, allowing team members to share concerns, discuss challenges, and celebrate accomplishments. They help managers stay informed about individual progress, offer timely guidance, and proactively address potential roadblocks before they become larger issues. ...

LM Studio lets organisations run open-source AI models entirely on-premises, keeping confidential risk data private. By eliminating third-party cloud exposure, it provides compliance, risk, and internal audit teams with a secure, cost-effective framework for safe AI adoption. Further reading LM Studio website

Artificial Intelligence (AI) rose to public prominence in recent years, and organisations are exploring how AI will disrupt their markets, operations, workforce and risk landscapes. This highlights the need for all three lines of defence to work together to manage AI risks and opportunities.

Governance is how an organisation is directed, controlled, and held accountable to achieve its objectives - all while balancing competing stakeholder interests. Organisations implement governance through a combination of frameworks, processes, and practices - which are crucial for risk professionals to understand to manage and mitigate risk.