<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>Devensa AI Blog</title>
    <link>https://50826474.hs-sites.com/blog</link>
    <description>Clear guidance on GRC, AI governance, and compliance for executives and boards. From the team building Devensa's integrated governance platform.</description>
    <language>en</language>
    <pubDate>Wed, 30 Sep 2026 04:06:50 GMT</pubDate>
    <dc:date>2026-09-30T04:06:50Z</dc:date>
    <dc:language>en</dc:language>
    <item>
      <title>Is Your AI Governance Tool Actually Governance? AI Governance vs. AI Controls</title>
      <link>https://50826474.hs-sites.com/blog/ai-governance-vs-ai-controls</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/ai-governance-vs-ai-controls" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/ai-governance-vs-controls-blog-1.png" alt="Title card: Is your AI governance tool actually governance? Governance sits above controls." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Fai-governance-vs-ai-controls&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>AI Governance</category>
      <pubDate>Tue, 22 Sep 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/ai-governance-vs-ai-controls</guid>
      <dc:date>2026-09-22T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>Who Owns Privacy? Why a DPO Title Doesn't Guarantee Accountability</title>
      <link>https://50826474.hs-sites.com/blog/who-owns-privacy-dpo-title-accountability</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/who-owns-privacy-dpo-title-accountability" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/06-privacy-vcpo-1.png" alt="A DPO oversight ring beside a separate product team box. Independent oversight is not operational authority." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Fwho-owns-privacy-dpo-title-accountability&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>Privacy</category>
      <pubDate>Thu, 17 Sep 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/who-owns-privacy-dpo-title-accountability</guid>
      <dc:date>2026-09-17T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>Who Actually Owns the Data?</title>
      <link>https://50826474.hs-sites.com/blog/who-actually-owns-the-data</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/who-actually-owns-the-data" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/05-data-governance-vcdo-1.png" alt="Data lineage from sign-up form to CRM to a named owner. Three hands touch the customer record and one is accountable." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Fwho-actually-owns-the-data&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>Data Governance</category>
      <pubDate>Tue, 15 Sep 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/who-actually-owns-the-data</guid>
      <dc:date>2026-09-15T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>Who Owns This Requirement?</title>
      <link>https://50826474.hs-sites.com/blog/who-owns-this-requirement</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/who-owns-this-requirement" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/04-compliance-vcco-1.png" alt="Obligation map linking three obligations to control owners. One has a named owner and two are unassigned." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Fwho-owns-this-requirement&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>Compliance</category>
      <pubDate>Thu, 10 Sep 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/who-owns-this-requirement</guid>
      <dc:date>2026-09-10T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>What Happens When Risk Ownership Isn't Assigned</title>
      <link>https://50826474.hs-sites.com/blog/what-happens-when-risk-ownership-isnt-assigned</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/what-happens-when-risk-ownership-isnt-assigned" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/03-risk-vcro-1.png" alt="Risk register with four owner rows. Three list a department and one lists a named person, J. Alvarez." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Fwhat-happens-when-risk-ownership-isnt-assigned&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>Risk Management</category>
      <pubDate>Tue, 08 Sep 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/what-happens-when-risk-ownership-isnt-assigned</guid>
      <dc:date>2026-09-08T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>Security Ownership: Why IT Handles That Is Usually Wrong</title>
      <link>https://50826474.hs-sites.com/blog/it-handles-that-is-usually-wrong</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/it-handles-that-is-usually-wrong" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/02-cybersecurity-vciso-1.png" alt="Two overlapping circles labelled IT and Security, with the overlap asking who decides. IT keeps the lights on. Security decides the risk." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Fit-handles-that-is-usually-wrong&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>Cybersecurity</category>
      <pubDate>Thu, 03 Sep 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/it-handles-that-is-usually-wrong</guid>
      <dc:date>2026-09-03T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>What Happens When No One Owns the AI Policy</title>
      <link>https://50826474.hs-sites.com/blog/no-one-owns-the-ai-policy</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/no-one-owns-the-ai-policy" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/01-ai-governance-vcaio-1.png" alt="Use case inventory with eight tiles and one reviewed. Six departments already use AI, and one tool got a risk review before launch." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Fno-one-owns-the-ai-policy&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>AI Governance</category>
      <pubDate>Tue, 01 Sep 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/no-one-owns-the-ai-policy</guid>
      <dc:date>2026-09-01T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>Five Data Findings That Repeat in Every Audit</title>
      <link>https://50826474.hs-sites.com/blog/five-data-findings-repeat-every-audit</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/five-data-findings-repeat-every-audit" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/why-departments-disagree-on-data-1.png" alt="Two lines for the finance ledger and product analytics converge on one reported number once governance is applied." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Ffive-data-findings-repeat-every-audit&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>Data Governance</category>
      <pubDate>Thu, 20 Aug 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/five-data-findings-repeat-every-audit</guid>
      <dc:date>2026-08-20T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>Five Signs an AI Deployment Has No Governance</title>
      <link>https://50826474.hs-sites.com/blog/five-signs-ai-deployment-no-governance</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/five-signs-ai-deployment-no-governance" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/shadow-ai-governance-1.png" alt="Oversight perimeter drawn around a network of twelve observed AI systems. The frame is the deliverable." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Ffive-signs-ai-deployment-no-governance&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>AI Governance</category>
      <pubDate>Tue, 18 Aug 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/five-signs-ai-deployment-no-governance</guid>
      <dc:date>2026-08-18T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
    <item>
      <title>Five Signs Your Risk Register Is a Filing Cabinet</title>
      <link>https://50826474.hs-sites.com/blog/five-signs-risk-register-filing-cabinet</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://50826474.hs-sites.com/blog/five-signs-risk-register-filing-cabinet" title="" class="hs-featured-image-link"&gt; &lt;img src="https://50826474.hs-sites.com/hubfs/site-files/images/blog/risk-register-real-decisions-1.png" alt="Board view with a compass and four live risk scores for third-party risk, regulatory change, incident exposure and control coverage." class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;img src="https://track.hubspot.com/__ptq.gif?a=50826474&amp;amp;k=14&amp;amp;r=https%3A%2F%2F50826474.hs-sites.com%2Fblog%2Ffive-signs-risk-register-filing-cabinet&amp;amp;bu=https%253A%252F%252F50826474.hs-sites.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>Risk Management</category>
      <pubDate>Thu, 13 Aug 2026 14:00:00 GMT</pubDate>
      <guid>https://50826474.hs-sites.com/blog/five-signs-risk-register-filing-cabinet</guid>
      <dc:date>2026-08-13T14:00:00Z</dc:date>
      <dc:creator>Alyssa O'Brien</dc:creator>
    </item>
  </channel>
</rss>
