In the current post I want to do a fast analysis of ISO/IEC 22989:2022 – “Artificial intelligence concepts and terminology”. In the global race for Artificial Intelligence dominance, most organizations are sprinting toward implementation while tripping over a fundamental hurdle: the lack of a shared language. We see it in every boardroom and technical meeting: “Trustworthiness” is treated as a subjective feeling, “Transparency” remains a vague promise, and the very definition of an “AI System” varies depending on who you ask. This “Babel Syndrome” isn’t just a communication issue but a significant risk to compliance, security, and strategic alignment. To lead in the AI era,Read More →

The “Move Fast and Break Things” era of Artificial Intelligence is officially over. As we navigate 2026, the conversation has shifted from what AI can do to how we can trust what it does. For organizations integrated into global supply chains or operating within the reach of the EU AI Act, AI governance is no longer a “legal checklist”, it is a competitive moat. This is where ISO/IEC 42001:2023 comes in. What is ISO/IEC 42001? Unlike technical standards that focus on model performance, ISO 42001 is the world’s first certifiable Artificial Intelligence Management System (AIMS). It provides a structured framework to manage the risks andRead More →

Cybersecurity has become an essential and omnipresent concept in our lives. Currently, everything is controlled by computer systems, which forces us to take good care of our best practices related to cybersecurity and the management of data privacy. I created a presentation about this, I would like to share with you. This presentation incluse all these topics: (document is in Spanish) 1. Introduction to cybersecurity 2. Security in the physical and logical world 3. Security in the professional and personal field 4. Evolution of threats. Digital threat 5. Origins of the attacks to our network and objective assets of the attacks 6. Social engineering, identityRead More →

In times when Cloud Computing, Internet of Things, mobile devices (including environments BYOD) are an increasingly widespread reality (and unstoppable future), thereby opening backdoors to our corporate network (and their respective threats), which place touches the IT security officer to manage an increasingly large number of hits and risks? Where is our corporate perimeter? Block accesses can talk or we have only to settle for being resilient to attacks due to a lack of control visibility and access control? Many doubts are raised, the market has responded and there are technological and non-technological solutions that seek to remedy the growing risk are suffering the organizations withRead More →

IT Governance or Corporate governance of information technology is a subset discipline of corporate governance, focused on information and technology (IT) and its performance and risk management. The interest in IT governance is due to the ongoing need within organizations to focus value creation efforts on an organization’s strategic objectives and to better manage the performance of those responsible for creating this value in the best interest of all stakeholders. I created a presentation where I explain in details this topic, you can see my presentation here: IT Governance & ISO 38500 from Ramiro Cid  Read More →

Lean IT is an extension of Lean manufacturing and Lean services principles to the development and management of information technology (IT) products and services. Lean concept and principles are not new because they were developed by Toyota some decades ago, but the use of Lean on IT is new. Lean IT central concern, applied in the context of IT, is the elimination of waste (or fat), where waste is work that adds no value to a product or service developed/delivered by the company. The approach is a way of thinking and acting, focussing heavily on organizational culture. Lean IT is associated with the development andRead More →