--- title: Insights | Cimbiotic description: Research and practical guidance on AI governance for professional and trade associations. image: https://www.cimbiotic.ai/hubfs/cimbiotic-og.png --- [Skip to content](https://www.cimbiotic.ai/insights#main) [Cimbiotic](https://www.cimbiotic.ai/) Menu [Home](https://www.cimbiotic.ai/)[AI Red Teaming](https://www.cimbiotic.ai/ai-red-teaming)[CimAssure](https://www.cimbiotic.ai/cimassure)[Pricing](https://www.cimbiotic.ai/pricing)[About](https://www.cimbiotic.ai/about)[Insights](https://www.cimbiotic.ai/insights) [Free Scorecard](https://www.cimbiotic.ai/scorecard) --- Insights # Notes on AI governance for associations Research, practical guidance and the occasional argument — written for people running membership organizations, not for AI specialists. Search Insights Search Oct 20, 2026, 2:24:03 PM · Rick Bawcum ## [Is the AI you tested the same AI you are running today?](https://www.cimbiotic.ai/insights/is-the-ai-you-tested-the-same-ai-you-are-running-today) The short answer is probably not The AI you tested last spring is rarely the AI answering your members today, and in most cases nobody sent you a notice that it changed. [Read it →](https://www.cimbiotic.ai/insights/is-the-ai-you-tested-the-same-ai-you-are-running-today) Oct 19, 2026, 1:52:12 PM · Rick Bawcum ## [What an AI vendor contract can and cannot do for your association](https://www.cimbiotic.ai/insights/what-an-ai-vendor-contract-can-and-cannot-do-for-your-association) Disclaimer: This is general information, not legal advice. Laws and vendor terms change, and the dates here are current as of October 18, 2026. Have counsel review any contract before you sign it or renew it. In brief ... [Read it →](https://www.cimbiotic.ai/insights/what-an-ai-vendor-contract-can-and-cannot-do-for-your-association) Oct 16, 2026, 12:08:23 PM · Rick Bawcum ## [GRC, explained for associations](https://www.cimbiotic.ai/insights/grc-explained-for-associations) Most associations have already decided whether to use AI (or not). GRC is how that decision gets governed, checked and shown to others. This post explains GRC in plain terms, and shows which part of it an assurance ... [Read it →](https://www.cimbiotic.ai/insights/grc-explained-for-associations) Oct 16, 2026, 11:11:53 AM · Rick Bawcum ## [Which of your AI systems need the most oversight? A classification checklist for associations](https://www.cimbiotic.ai/insights/which-of-your-ai-systems-need-the-most-oversight-a-classification-checklist-for-associations) Most associations can list the AI tools they use. Fewer can say which of those tools could change a member's status, and who is accountable if one gets it wrong. This checklist sorts deployed AI systems by impact, so ... [Read it →](https://www.cimbiotic.ai/insights/which-of-your-ai-systems-need-the-most-oversight-a-classification-checklist-for-associations) Oct 10, 2026, 11:28:40 AM · Rick Bawcum ## [A one-time result describes one day. Continuous assurance describes the product you use every day](https://www.cimbiotic.ai/insights/one-time-result-vs-continuous-assurance) An AI product is not the same product from one month to the next. The vendor pushes an update. The underlying model is swapped for a newer one. A prompt is adjusted, a new feature is switched on, or someone in your ... [Read it →](https://www.cimbiotic.ai/insights/one-time-result-vs-continuous-assurance) Oct 10, 2026, 11:28:38 AM · Rick Bawcum ## [Four questions to ask when a vendor says "we already test"](https://www.cimbiotic.ai/insights/four-questions-to-ask-when-a-vendor-says-we-already-test) Ask an AI vendor how they make sure their product behaves, and a good one will tell you they test it. Many will show you a dashboard. [Read it →](https://www.cimbiotic.ai/insights/four-questions-to-ask-when-a-vendor-says-we-already-test) Oct 10, 2026, 11:28:37 AM · Rick Bawcum ## [Testing your own AI is quality control. Assurance is something else.](https://www.cimbiotic.ai/insights/testing-your-own-ai-is-quality-control) Most AI vendors serving associations and nonprofits now test their products. That is the minimum a buyer should expect, and the teams doing it well deserve credit. [Read it →](https://www.cimbiotic.ai/insights/testing-your-own-ai-is-quality-control) Oct 9, 2026, 12:11:53 PM · Rick Bawcum ## [Where independent assurance fits in the AI governance stack](https://www.cimbiotic.ai/insights/where-independent-assurance-fits-in-the-ai-governance-stack) The short answer: Gartner's 2026 Hype Cycle for AI Governance Technologies maps the tools organizations are buying to turn AI policy into practice. It is a useful map. It also shows what that tooling does not do: tell a ... [Read it →](https://www.cimbiotic.ai/insights/where-independent-assurance-fits-in-the-ai-governance-stack) Oct 8, 2026, 1:23:07 PM · Rick Bawcum ## [How do we test whether an AI agent is doing what it should?](https://www.cimbiotic.ai/insights/how-do-we-test-whether-an-ai-agent-is-doing-what-it-should) The short answer: test what it does, not what it says. Send it realistic requests through the channel it actually uses, with test records instead of real members, and check what happened: whether the record changed, ... [Read it →](https://www.cimbiotic.ai/insights/how-do-we-test-whether-an-ai-agent-is-doing-what-it-should) Oct 4, 2026, 5:13:49 PM · Rick Bawcum ## [When an AI agent goes wrong, who answers for it?](https://www.cimbiotic.ai/insights/who-is-liable) The short answer: nobody can tell you yet, and that is the point. A new MIT Technology Review piece shows that when AI agents cause harm, the rules for reporting it, investigating it and assigning responsibility are ... [Read it →](https://www.cimbiotic.ai/insights/who-is-liable) Page 1 of 2 [Older →](https://www.cimbiotic.ai/insights/page/2) ## Where does your organization actually stand? Seventeen questions, about five minutes, no sign-up to see your result. [Take the free Scorecard](https://www.cimbiotic.ai/scorecard) [Book a 30-minute call](https://calendly.com/rbawcum) Cimbiotic Independent AI assurance for professional and trade associations, and the wider non-profit sector. Humans Leading Change #### Cimbiotic - [CimAssure](https://www.cimbiotic.ai/cimassure) - [Framework & approach](https://www.cimbiotic.ai/framework) - [Pricing](https://www.cimbiotic.ai/pricing) - [About](https://www.cimbiotic.ai/about) - [Insights](https://www.cimbiotic.ai/insights) - [Questions we get](https://www.cimbiotic.ai/questions) #### Start - [Free Trust Readiness Scorecard](https://www.cimbiotic.ai/scorecard) - [Book a 30-minute call](https://calendly.com/rbawcum?utm_source=website&utm_medium=footer&utm_campaign=general&utm_content=footer) - [inquiries@cimbiotic.ai](mailto:inquiries@cimbiotic.ai) © 2026 Cimbiotic. Assurance, not a guarantee. Aligning to ISO/IEC 17065. Not currently accredited. [Privacy](https://www.cimbiotic.ai/privacy) Cookie settings ```json { "@context" : "https://schema.org", "@type" : "Blog", "description" : "Research and practical guidance on AI governance for professional and trade associations.", "inLanguage" : "en-US", "name" : "Cimbiotic Insights", "publisher" : { "@id" : "https://www.cimbiotic.ai/#org", "@type" : "Organization", "name" : "Cimbiotic", "url" : "https://www.cimbiotic.ai/" }, "url" : "https://www.cimbiotic.ai/insights" } ```