Updates
Change log for the AI Security and Compliance Operations handbook.
Written and reviewed by Eric Han · Co-founder & CTO, reopt
2026-10-23 · Regulatory dates and agent controls
- Updated the July AI Omnibus entry into force, Annex III/Annex I dates, literacy simplification, and limited Article 50 grace period.
- Added MCP audience/redirect/SSRF controls, OWASP ACS, and Red Teaming Manual 1.0.
- Distinguished legal classification from internal prioritization and aligned the audit guidance with scoped evidence mapping.
Earlier records
Historical dates below record the earlier review; use Risk Governance and Audit Readiness for current applicability.
2026-06-13
- Review and maintenance pass: fixed the internal Contents links on the cover page so the English edition stays within the
/en/books/locale path (the bare/books/links were redirecting readers to the Korean edition).
2026-05-13
- Published the English edition of the AI Security and Compliance Operations handbook.
- Added governance, data protection, secure architecture, prompt injection, access control, audit readiness, incident response, and board reporting chapters.
- Added a glossary and verification checklist for operating readiness.
Update Policy
Update this handbook when AI risk policy, audit requirements, incident process, data classification, or approved tool/runtime patterns change.