The AI Governance Briefing with Dr. Tuboise Floyd

Dr. Rhonda Farrell: AI Doesn't Break Your Organization. It Reveals It.

Most organizations are not failing because they lack effort. They are failing because policy, process, people, and platforms were never designed to operate as an integrated system. AI does not fix that system. AI reveals it. In this Guest Feature, Dr. Tuboise Floyd sits down with Dr. Rhonda Farrell — United States Marine Corps veteran, ASQ Fellow, IEEE Senior Member, ISSA Distinguished Fellow, and Founder of the Cyber & STEAM Global Innovation Alliance — for a field report from inside the DoD, DHS, NSA, Department of State, and the broader intelligence community on what functional AI governance actually requires. Her thesis: AI is a forcing function. And pressure does not break solutions. It reveals them. ━━━━━━━━━━━━━━━━━━━━━━━━━━ 🔑 KEY IDEAS ━━━━━━━━━━━━━━━━━━━━━━━━━━ ▪ Why high-performing people keep drowning inside low-performing ecosystems ▪ The difference between performative compliance and mission-functional compliance ▪ Why policy without an execution path is just theory ▪ The four-P traceability model: Policy → Process → People → Platforms ▪ How to sequence NIST CSF, CMMC, NIST AI RMF, and TAIMScore™ as a phased maturation program ▪ The Monday Morning Move — a live exercise leaders can run tomorrow ▪ Why pressure does not break solutions. It reveals them. ━━━━━━━━━━━━━━━━━━━━━━━━━━ 🎙 CHAPTERS ━━━━━━━━━━━━━━━━━━━━━━━━━━ 00:00:00 — Open: The Veteran's Diagnosis 00:02:00 — High-Performing People, Low-Performing Ecosystems 00:05:00 — The Design Problem: Why Integration Was Never Built 00:10:00 — Policy → Process → People → Platforms: The Traceability Model 00:12:00 — Performative vs. Mission-Functional Compliance 00:14:00 — AI as the Forcing Function 00:17:00 — Sequencing NIST CSF, CMMC, NIST AI RMF, and TAIMScore™ 00:20:00 — Policy Without Execution Is Just Theory 00:25:00 — The Design Shift: From Frameworks to Operationalization 00:32:00 — The Monday Morning Move 00:37:00 — Pressure Does Not Break Solutions. It Reveals Them. 00:39:00 — Where to Follow Dr. Farrell's Work 00:41:00 — Close: Govern the Machine or Be the Resource It Consumes ━━━━━━━━━━━━━━━━━━━━━━━━━━ 📺 WATCH ON YOUTUBE ━━━━━━━━━━━━━━━━━━━━━━━━━━ https://youtu.be/ACe9px5XZZ8 ━━━━━━━━━━━━━━━━━━━━━━━━━━ 📰 COMPANION PIECES ━━━━━━━━━━━━━━━━━━━━━━━━━━ ▶ Issue 015 of The AI Governance Record (written companion): https://theaigovernancerecord.com/record/issue-015 ▶ Subscribe to the newsletter: https://theaigovernancerecord.com/newsletter ▶ Deep-dive blog: https://theaigovernancebriefing.com/blog ━━━━━━━━━━━━━━━━━━━━━━━━━━ 🎟 LIVE EVENT — MAY 14, 2026 ━━━━━━━━━━━━━━━━━━━━━━━━━━ Human Signal Town Hall — The Strict Reality of AI Governance Dr. Rhonda Farrell is a confirmed speaker. 50 seats. $97 pre-sale through April 30. $147 from May 1. Reserve: https://humansignal.io/townhall ━━━━━━━━━━━━━━━━━━━━━━━━━━ 📄 READ THE POSITION PAPER ━━━━━━━━━━━━━━━━━━━━━━━━━━ The Pedagogy Problem in AI Governance — Dr. Tuboise Floyd's foundational position paper. Available on SSRN and at humansignal.io/position-paper. DOI: 10.2139/ssrn.6549178 ━━━━━━━━━━━━━━━━━━━━━━━━━━ 🎓 TAIMSCORE™ ASSESSOR WORKSHOP ━━━━━━━━━━━━━━━━━━━━━━━━━━ Want to measure your organization's AI governance maturity against a standard? Dr. Floyd is a TAIMScore™ Certified Assessor (HISPI). https://humansignal.io/taimscore ━━━━━━━━━━━━━━━━━━━━━━━━━━ 📚 FAILURE FILES™ ━━━━━━━━━━━━━━━━━━━━━━━━━━ Governance pedagogy through real AI failure analysis. Free public instrument from Human Signal, underwritten by Project Cerebellum. https://humansignal.io/failure-files ━━━━━━━━━━━━━━━━━━━━━━━━━━ 👤 ABOUT THE GUEST ━━━━━━━━━━━━━━━━━━━━━━━━━━ Dr. Rhonda Farrell, DM, MS, MBA, CISSP, PMP, LSSMBB, is Executive Advisor, Transformation Strategist, and Founder & CEO of Global Innovation Strategies and the Cyber & STEAM Global Innovation Alliance. A United States Marine Corps veteran with twenty-plus years driving enterprise transformation, AI, cybersecurity, and innovation across the DoD, NSA, DHS, Department of State, and broader intelligence community. ASQ Fellow. IEEE Senior Member. ISSA Distinguished Fellow. Her Cyber & STEAM Global Innovation Alliance is building toward 10,000 partners serving one million people globally across STEAM, cyber, and innovation. LinkedIn: https://www.linkedin.com/in/rhondafarrell/ Website: https://gblinnovstratllc.com Email: CEO@gblinnovstratllc.com Watch Dr. Farrell's weekly "Spotlight on Strategy" series on YouTube: https://youtube.com/@gblinnovstrat ━━━━━━━━━━━━━━━━━━━━━━━━━━ 🎙 ABOUT THE HOST ━━━━━━━━━━━━━━━━━━━━━━━━━━ Dr. Tuboise Floyd, PhD, is Founder and Chief Sensemaking Officer of Human Signal (humansignal.io), Editor in Chief of The AI Governance Record (theaigovernancerecord.com), Host of The AI Governance Briefing(theaigovernancebriefing.com), and a TAIMScore™ Certified Assessor. His doctoral work at Auburn University (2010) in adult education and systems theory underpins Human Signal's pedagogical frameworks, including the Trust Gap, GASP™, the Workflow Thesis, Noise Discipline, and the L.E.A.C. Protocol™. ORCID: 0009-0008-0055-072X ━━━━━━━━━━━━━━━━━━━━━━━━━━ 🔗 CONNECT ━━━━━━━━━━━━━━━━━━━━━━━━━━ Website: https://humansignal.io LinkedIn: https://linkedin.com/in/drtuboisefloyd Brand channel: https://linkedin.com/in/theaigovernancebriefing Podcast RSS: https://feeds.captivate.fm/the-ai-governance Apple Podcasts: https://podcasts.apple.com/us/podcast/the-ai-governance-briefing/id1847777960 ━━━━━━━━━━━━━━━━━━━━━━━━━━ Independence is not a feature. It is the product. Govern the machine. Or be the resource it consumes. #AIGovernance #AIRiskManagement #DigitalTransformation #Compliance #GRC #DrRhondaFarrell #DrTuboiseFloyd #HumanSignal #TheAIGovernanceBriefing #NISTAIRMF #TAIMScore #HISPI #USMC #DoD #NSA #EnterpriseAI #Leadership This podcast uses the following third-party services for analysis: OP3 - https://op3.dev/privacy

Navigating the Complexities of AI Governance: Introducing TAIMScore™

TAIMScore™ is the Trusted AI Model Score — a 20-control AI governance framework built by HISPI Project Cerebellum. In this episode of The AI Governance Briefing, Dr. Tuboise Floyd, PhD breaks down how TAIMScore™ turns AI accountability into something you can measure, score, and prove. Four governance domains. Twenty essential controls. Mapped against NIST AI RMF, the EU AI Act, HIPAA, PCI DSS, SOC 2, EU GDPR, and the White House AI Executive Order. If your institution needs a blueprint for AI governance that survives regulatory scrutiny, this is the starting point. AI is already deployed. The institutions that survive will be the ones that can prove they govern it. ────────────────────────────────────── WHAT YOU WILL LEARN ────────────────────────────────────── ∙ Why AI incidents make governance non-negotiable ∙ The Project Cerebellum mission: AI should cause no harm ∙ How the four TAIM domains — GOVERN, MAP, MEASURE, MANAGE — work as an accountability cycle ∙ The 20 TAIMScore™ controls every AI-deploying organization must address ∙ How to crosswalk your AI posture against global regulatory frameworks ∙ Why the AI kill switch is essential governance — not optional ────────────────────────────────────── CHAPTERS ────────────────────────────────────── 0:00 Welcome and Introduction 0:28 Real Risks of AI 1:18 Real Generative AI Incidents 2:13 Project Cerebellum: AI Should Cause No Harm 2:48 Vision and Mission 3:33 The Four TAIM Domains 5:01 GOVERN — AI Risk Training (Govern 2.2) 5:31 GOVERN — Supply Chain Policy (Govern 6.1) 6:01 MAP — Establishing Context (Map 1.2) 6:26 MAP — System Requirements (Map 1.6) 6:55 MAP — Third Party Risk (Map 4.1) 7:13 MAP — Impact Documentation (Map 5.1) 7:33 MEASURE — Human Evaluations (Measure 2.2) 7:51 MEASURE — Reliability (Measure 2.5) 8:07 MEASURE — Safety Risk (Measure 2.6) 8:23 MEASURE — Explainability (Measure 2.9) 8:37 MEASURE — Privacy Risk (Measure 2.10) 8:51 MEASURE — Fairness and Bias (Measure 2.11) 9:09 MEASURE — Risk Tracking (Measure 3.1) 9:23 MEASURE — Feedback Loops (Measure 3.3) 9:41 MEASURE — Performance Data (Measure 4.3) 9:57 MANAGE — Resource Allocation (Manage 2.1) 10:19 MANAGE — Unknown Risks (Manage 2.3) 10:35 MANAGE — The Kill Switch (Manage 2.4) 10:55 MANAGE — Post-Deployment Monitoring (Manage 4.1) 11:11 MANAGE — Incident Communications (Manage 4.3) 11:29 TAIMScore™: The Payoff 11:52 Framework Crosswalks — HIPAA, SOC 2, EU AI Act 13:51 Closing and How to Get Involved ────────────────────────────────────── TAIMSCORE™ ASSESSOR WORKSHOP ────────────────────────────────────── Virtual. Instructor-led. One day. Six CPEs. Third Friday of every month. 🔗 humansignal.io/taimscore_assessor_workshop ────────────────────────────────────── FAILURE FILES™ — TAIMScore™ APPLIED ────────────────────────────────────── See TAIMScore™ applied to real institutional failures: 🔗 humansignal.io/failure-files ────────────────────────────────────── RESOURCES ────────────────────────────────────── Project Cerebellum — projectcerebellum.com HISPI — hispi.org HISPI LinkedIn Group — linkedin.com/groups/6624427 Email — projectcerebellum@hispi.org ────────────────────────────────────── ABOUT HISPI PROJECT CEREBELLUM ────────────────────────────────────── Project Cerebellum is the AI Governance Think Tank of HISPI — the Holistic Information Security Practitioner Institute. The Trusted AI Model (TAIM) is a flagship framework of 72 controls across four domains that harmonize leading AI governance standards into a practical scoring system. TAIMScore™ was created by Taiye Lambo, Founder and Chief Artificial Intelligence Officer of HISPI. ────────────────────────────────────── ABOUT THE HOST ────────────────────────────────────── Dr. Tuboise Floyd, PhD is the Founder and Chief Sensemaking Officer of Human Signal, Editor in Chief of The AI Governance Record, and a TAIMScore™ Certified Assessor. He holds a PhD from Auburn University and is a member of the HISPI Advocacy & Education Working Group (Project Cerebellum). ────────────────────────────────────── CONNECT ────────────────────────────────────── Website: humansignal.io Podcast: theaigovernancebriefing.com/podcast LinkedIn: linkedin.com/in/drtuboisefloyd Email: tuboise@theaigovernancebriefing.com Govern the machine. Or be the resource it consumes. #TAIMScore #AIGovernance #AIAccountability #HISPI #ProjectCerebellum #NISTAIRMF #EUAIAct #AICompliance #FailureFiles #TrustedAIModel #DrTuboiseFloyd #HumanSignal #TheAIGovernanceBriefing #BuilderClass #AIRisk Companies mentioned in this episode: * hispi * Holistic Information Security Practitioner Institute * Project Cerebellum * Microsoft * OpenAI * ISO * IEC * HIPAA * PCI * DSS * SoC2 * EU AI Act * EU GDPR * White House AI Executive Order Takeaways: * The podcast episode emphasizes the necessity for organizations to establish robust frameworks for AI governance, particularly through the TAIM model. * The TAIM framework is designed to ensure that AI deployments are safe, secure, responsible, and trustworthy, addressing potential risks proactively. * A significant focus of the episode is on the real-world examples of AI risks, illustrating the importance of governance in mitigating these risks. * Effective AI governance requires continuous monitoring and assessment, ensuring that systems remain compliant with evolving regulatory standards. * The TAIM score provides organizations with a concrete evaluation of their AI governance posture against relevant regulatory frameworks. * The importance of interdisciplinary collaboration in AI governance is highlighted, underscoring the necessity of diverse perspectives in risk assessment. This podcast uses the following third-party services for analysis: OP3 - https://op3.dev/privacy

Distributed AI Has No Governor: The Structural Failure Behind Enterprise AI Accountability

EPISODE SUMMARY In this episode of The AI Governance Briefing, Dr. Tuboise Floyd delivers a pointed analysis of why enterprise AI governance is failing at the structural level. The problem isn't a lack of policy — it's that governance was designed for a world that no longer exists. Distributed AI — running across edge devices, vendor stacks, and multi-agent pipelines — has dissolved the single point of control that traditional compliance frameworks depend on. ────────────────────────────────────── KEY TAKEAWAYS ────────────────────────────────────── Key Takeaway 1: Distributed AI Is a Governance Condition, Not a Technology Trend The shift to distributed AI isn't just an infrastructure evolution — it's a fundamental change in where accountability lives. When AI executes across multiple nodes, devices, or third-party systems without unified oversight, you're no longer in a governance framework. You're in a governance gap. Every edge deployment, every federated model, every multi-agent workflow is an accountability question first, a technology question second. Key Takeaway 2: The Architecture of Blame Is Predictable — and Avoidable The pattern behind every major AI failure in recent years is the same: the vendor says the output was within spec; the integrator says the client configured the workflow; the client says legal approved the policy; legal says the policy covered the old system. Nobody owns the failure. The reason isn't bad actors — it's structural ambiguity. When no one owns the decision at the node, blame distributes as efficiently as the AI does. Key Takeaway 3: "Permitted" Is Not the Same as "Admissible" A policy that allows a model to run is not the same as governance that can see what the model is doing. This visibility gap — between what is authorized on paper and what is observable in execution — is where accountability collapses. Functional governance requires audit trails, intervention triggers, and independence from vendor contracts built into the architecture itself, not appended to it. ────────────────────────────────────── DR. FLOYD'S 3 DIAGNOSTIC QUESTIONS ────────────────────────────────────── 1. Who owns the decision at the node — not the system, the decision? If the answer is vague, you have a gap. 2. What is the escalation path? A single risk officer cannot handle fifty simultaneous failures across fifty nodes. The architecture must match the distribution. 3. What accountability exists without the vendor? If your governance breaks when the vendor changes the API, you don't have governance — you have vendor dependency. ────────────────────────────────────── 3 REQUIREMENTS FOR FUNCTIONAL GOVERNANCE ────────────────────────────────────── 1. Visibility at every execution point. If you cannot see the node, you cannot govern the node. 2. Accountability without humans in every loop. Humans cannot scale to distributed AI. Audit trails and intervention triggers must be designed into the system. 3. Independence. The governance structure must survive vendor changes and contract terminations. ────────────────────────────────────── CLOSING REFLECTION ────────────────────────────────────── The winners in the AI era won't be the organizations with the best technology. They'll be the ones with the structural discipline to govern it. This week, ask yourself three things: Can you name every device where your AI is making decisions? If your vendor changed the model tonight, how long would it take you to find out? And who is responsible when failure happens inside a workflow you don't control? Architect for reality — or discover reality when the system fails. Govern the machine. Or be the resource it consumes. ────────────────────────────────────── CHAPTERS ────────────────────────────────────── 0:00 - The Illusion of Governance 0:32 - Distributed AI Outruns Policy 1:10 - The Architecture of Blame 1:52 - The Trust Gap Framework 2:18 - Permitted ≠ Admissible 2:45 - Redesigning Accountability Architecture 3:28 - 3 Diagnostic Questions 4:10 - What Functional Governance Actually Requires ────────────────────────────────────── FRAMEWORKS REFERENCED ────────────────────────────────────── → The Trust Gap — humansignal.io/frameworks/trust-gap → GASP™ (Governance As a Structural Problem) — humansignal.io/frameworks/gasp → L.E.A.C. Protocol™ — humansignal.io/leac-protocol → Failure Files™ — humansignal.io/failure-files → TAIMScore™ Assessor Workshop — humansignal.io/taimscore_assessor_workshop ────────────────────────────────────── ABOUT THE HOST ────────────────────────────────────── Dr. Tuboise Floyd is the Founder and Chief Sensemaking Officer of Human Signal — an independent AI governance research and media platform based in Washington, DC. He is the Editor in Chief of The AI Governance Record, Host of The AI Governance Briefing, and a TAIMScore™ Certified Assessor (HISPI, March 2026). A PhD social scientist (Auburn University, Adult Education / Systems Theory), Dr. Floyd reverse-engineers institutional AI failures and builds governance frameworks that operators can actually use. His canonical thesis: most institutions will not fail because of a bad AI model. They will fail because of a broken governance structure around it. Independence is not a feature. It is the product. ────────────────────────────────────── SUPPORT THE SHOW ────────────────────────────────────── Help fuel independent AI governance research, new episodes, and the Failure Files™ series. 🔗 https://theaigovernancebriefing.com/support Every contribution sustains the signal. ────────────────────────────────────── PRODUCTION NOTES ────────────────────────────────────── Host & Producer: Dr. Tuboise Floyd Creative Director: Jeremy Jarvis A Human Signal Production Recorded with true analog warmth. No artificial polish, no algorithmic smoothing. Just pure signal and real presence for leaders who value authentic sound. ────────────────────────────────────── CONNECT ────────────────────────────────────── Website: humansignal.io Podcast: theaigovernancebriefing.com LinkedIn: linkedin.com/in/drtuboisefloyd Email: tuboise@theaigovernancebriefing.com General inquiries: hello@theaigovernancebriefing.com ────────────────────────────────────── TRANSCRIPT ────────────────────────────────────── Full transcript available upon request at hello@theaigovernancebriefing.com ────────────────────────────────────── LEGAL ────────────────────────────────────── © 2026 Dr. Tuboise Floyd. All rights reserved. Content is part of the Presence Signaling Architecture® (PSA), GASP™, and L.E.A.C. Protocol™. Human Signal is an independent research and media platform. Nothing in this episode constitutes legal, regulatory, compliance, or professional advice. ────────────────────────────────────── TAGS ────────────────────────────────────── AI governance, AI accountability, distributed AI, AI policy, responsible AI, AI compliance, AI risk management, AI at the edge, federated learning, multi-agent systems, edge computing AI, AI governance framework, AI accountability gap, AI oversight, trust gap framework, AI leadership, AI regulation, AI vendor risk, governance architecture, AI decision making, AI audit trail, AI policy failure, AI governance failure, GASP framework, L.E.A.C. Protocol, Failure Files, TAIMScore, Dr. Tuboise Floyd, Human Signal, The AI Governance Briefing This podcast uses the following third-party services for analysis: OP3 - https://op3.dev/privacy

AI Governance Open Forum: Critical Thinking, Risk, and “Never Blindly Trust—Always Verify”

EPISODE DESCRIPTION At a laid-back campus open forum, students are invited to ask questions about AI governance to Taiye Lambo, Founder and Chief Artificial Intelligence Officer of the Holistic Information Security Practitioner Institute (HISPI), and Dr. Tuboise Floyd, Founder of Human Signal and Host of The AI Governance Briefing. Speakers frame AI literacy as a civic and professional survival skill — not a technical one. Employers now expect workers to critically evaluate AI outputs, not just use them. The conversation covers deepfakes and short-form media manipulation, the dangers of overreliance on AI (including the attorney who cited fabricated ChatGPT case law in federal court), the principle of "never blindly trust, always verify," and the structural need for continuous auditing, accountability, and an honest human in the loop — especially in clinical and environmental contexts. Students are advised to build strong domain knowledge, think critically, pursue internships, and invest in AI governance and risk certifications over tool-specific training. ────────────────────────────────────── CHAPTERS ────────────────────────────────────── 00:00 Welcome and Setup 00:52 Meet the Experts 01:57 Taiye on Governance Focus 02:53 Dr. Floyd Background and Podcast 04:39 Open Forum Begins 05:02 AI Literacy for Careers 07:23 Threat or Opportunity Poll 10:01 AI Literacy Beyond STEM 10:49 Spotting Deepfakes in Shorts 15:35 Using AI Without Replacing Learning 16:14 Lawyer Case and Overtrusting AI 18:08 Never Blindly Trust — Verify 19:06 Wikipedia Analogy and Real Risks 20:31 Business Ethics Reality Check 21:06 Continuous Audits in Clinics 21:28 Human in the Loop Matters 22:04 Environmental AI Data Gaps 23:13 Public Trust and Accountability 23:33 Honest Human Oversight 25:28 Tokens and Hallucinations 26:51 Bias in Training Data 27:56 Interviewing in the AI Era 30:28 AI Disruption and Generational Shift 33:21 High-Stakes AI Blind Spots 36:02 Rapid Fire Career Advice 41:03 Closing and Next Steps ────────────────────────────────────── GUEST ────────────────────────────────────── Taiye Lambo Founder & Chief Artificial Intelligence Officer Holistic Information Security Practitioner Institute (HISPI) 🔗 https://www.hispi.org 🔗 https://projectcerebellum.com LinkedIn: linkedin.com/in/taiyelambo TAIMScore™ Assessor Workshop 🔗 https://humansignal.io/taimscore_assessor_workshop ────────────────────────────────────── FRAMEWORKS REFERENCED ────────────────────────────────────── → The Trust Gap — humansignal.io/frameworks/trust-gap → GASP™ (Governance As a Structural Problem) — humansignal.io/frameworks/gasp → Failure Files™ — humansignal.io/failure-files → TAIMScore™ Assessor Workshop — humansignal.io/taimscore → L.E.A.C. Protocol™ — humansignal.io/leac-protocol ────────────────────────────────────── KEY TAKEAWAYS ────────────────────────────────────── 1. AI governance is the structural discipline that makes ethical decision-making and risk mitigation possible — not a compliance checkbox. 2. Employers now expect candidates to critically evaluate AI outputs. Using AI without scrutiny is a liability, not a skill. 3. AI literacy is not a STEM competency. It is a professional survival skill for every sector. 4. Human oversight is not optional in high-stakes AI deployments. Audit trails and intervention triggers must be designed in — not appended after failure. 5. Understanding how AI systems are trained matters — especially in healthcare, law, and environmental contexts where bad data produces dangerous outputs. 6. Domain knowledge, critical thinking, and governance certifications outperform tool-specific training in a market where the tools change every six months. ────────────────────────────────────── SUPPORT THE SHOW ────────────────────────────────────── Subscribe now to lock in the feed. This isn't just content — it's a continuing briefing for the Builder Class. Help fuel independent AI governance research, new episodes, and the Failure Files™ series. 🔗 https://theaigovernancebriefing.com/support Every contribution sustains the signal. ────────────────────────────────────── ABOUT THE HOST ────────────────────────────────────── Dr. Tuboise Floyd is the Founder and Chief Sensemaking Officer of Human Signal — an independent AI governance research and media platform based in Washington, DC. He is the Editor in Chief of The AI Governance Record, Host of The AI Governance Briefing, and a TAIMScore™ Certified Assessor (HISPI, March 2026). A PhD social scientist (Auburn University, Adult Education / Systems Theory), Dr. Floyd reverse-engineers institutional AI failures and builds governance frameworks that operators can actually use. His canonical thesis: most institutions will not fail because of a bad AI model. They will fail because of a broken governance structure around it. Independence is not a feature. It is the product. ────────────────────────────────────── PRODUCTION NOTES ────────────────────────────────────── Host & Producer: Dr. Tuboise Floyd Creative Director: Jeremy Jarvis A Human Signal Production Recorded with true analog warmth. No artificial polish, no algorithmic smoothing. Just pure signal and real presence for leaders who value authentic sound. ────────────────────────────────────── CONNECT ────────────────────────────────────── Website: humansignal.io Podcast: theaigovernancebriefing.com LinkedIn: linkedin.com/in/drtuboisefloyd Email: tuboise@theaigovernancebriefing.com General inquiries: hello@theaigovernancebriefing.com ────────────────────────────────────── TRANSCRIPT ────────────────────────────────────── Full transcript available at: https://humansignal.io/blog/ai-governance-open-forum-never-blindly-trust-verify ────────────────────────────────────── LEGAL ────────────────────────────────────── © 2026 Dr. Tuboise Floyd. All rights reserved. Content is part of the Presence Signaling Architecture® (PSA), GASP™, and L.E.A.C. Protocol™. Human Signal is an independent research and media platform. Nothing in this episode constitutes legal, regulatory, compliance, or professional advice. Guest opinions are those of the guest alone. ────────────────────────────────────── TAGS ────────────────────────────────────── AI governance, AI literacy, AI accountability, AI policy, responsible AI, AI compliance, AI risk management, AI ethics, enterprise AI, government AI, technology leadership, deepfakes, AI hallucination, AI training data bias, human in the loop, AI oversight, AI career advice, AI governance certification, TAIMScore, GASP framework, Failure Files, Trust Gap, never blindly trust verify, Project Cerebellum, HISPI, Taiye Lambo, Dr. Tuboise Floyd, Human Signal, The AI Governance Briefing This podcast uses the following third-party services for analysis: OP3 - https://op3.dev/privacy

Korean Air KC&D: Supply Chain Breach and the Data That Never Left

EPISODE DESCRIPTION In this episode of The AI Governance Briefing, Dr. Tuboise Floyd breaks down the Korean Air / KC&D supply chain breach — a forensic autopsy of what happens when data governance doesn't travel with the data. In December 2025, Korean Air disclosed that 30,000 employee records were stolen. The breach didn't come through Korean Air's systems. It came through KC&D Service — a catering subsidiary spun off and sold to private equity in 2020. Five years later, KC&D was still holding Korean Air employee data on an unpatched Oracle ERP server. The Cl0p ransomware group exploited CVE-2025-61882 — CVSS 9.8 — and published 500GB on a dark web leak site. Six TAIMScore™ controls failed simultaneously. Three domains. All because the data moved out of sight — not out of risk. This is a Failure File™. Not a warning. A forensic record. ────────────────────────────────────── KEY TOPICS ────────────────────────────────────── ∙ Supply chain governance and third-party vendor risk ∙ What happens when a divestiture doesn't include data governance ∙ The Oracle EBS zero-day and its 100+ organizational victims ∙ TAIMScore™ forensic: GOVERN, MAP, and MANAGE domain failures ∙ The one question every institution needs to ask today ────────────────────────────────────── FRAMEWORKS REFERENCED ────────────────────────────────────── → Failure Files™ — humansignal.io/failure-files → TAIMScore™ Assessor Workshop — humansignal.io/taimscore_assessor_workshop → GASP™ (Governance As a Structural Problem) — humansignal.io/frameworks/gasp → The Trust Gap — humansignal.io/frameworks/trust-gap → L.E.A.C. Protocol™ — humansignal.io/leac-protocol ────────────────────────────────────── SUPPORT THE SHOW ────────────────────────────────────── Subscribe now to lock in the feed. This isn't just content — it's a continuing briefing for the Builder Class. Help fuel independent AI governance research, new episodes, and the Failure Files™ series. 🔗 https://theaigovernancebriefing.com/support Every contribution sustains the signal. ────────────────────────────────────── ABOUT THE HOST ────────────────────────────────────── Dr. Tuboise Floyd is the Founder and Chief Sensemaking Officer of Human Signal — an independent AI governance research and media platform based in Washington, DC. He is the Editor in Chief of The AI Governance Record, Host of The AI Governance Briefing, and a TAIMScore™ Certified Assessor (HISPI, March 2026). A PhD social scientist (Auburn University, Adult Education / Systems Theory), Dr. Floyd reverse-engineers institutional AI failures and builds governance frameworks that operators can actually use. His canonical thesis: most institutions will not fail because of a bad AI model. They will fail because of a broken governance structure around it. Independence is not a feature. It is the product. ────────────────────────────────────── PRODUCTION NOTES ────────────────────────────────────── Host & Producer: Dr. Tuboise Floyd Creative Director: Jeremy Jarvis A Human Signal Production Recorded with true analog warmth. No artificial polish, no algorithmic smoothing. Just pure signal and real presence for leaders who value authentic sound. ────────────────────────────────────── CONNECT ────────────────────────────────────── Website: humansignal.io Podcast: theaigovernancebriefing.com LinkedIn: linkedin.com/in/drtuboisefloyd Email: tuboise@theaigovernancebriefing.com General inquiries: hello@theaigovernancebriefing.com ────────────────────────────────────── TRANSCRIPT ────────────────────────────────────── Full transcript available at: https://theaigovernancebriefing.com/blog ────────────────────────────────────── LEGAL ────────────────────────────────────── © 2026 Dr. Tuboise Floyd. All rights reserved. Content is part of the Presence Signaling Architecture® (PSA), GASP™, and L.E.A.C. Protocol™. Human Signal is an independent research and media platform. Nothing in this episode constitutes legal, regulatory, compliance, or professional advice. Case studies are based on publicly available information and presented as pedagogical tools — not legal findings or accusations of wrongdoing. ────────────────────────────────────── TAGS ────────────────────────────────────── AI governance, supply chain risk, third-party vendor risk, data breach, Korean Air, KC&D, Cl0p ransomware, Oracle EBS, CVE-2025-61882, TAIMScore, TAIM framework, Failure Files, institutional risk, data governance, divestiture risk, vendor oversight, AI accountability, GASP framework, Trust Gap, governance failure, Dr. Tuboise Floyd, Human Signal, The AI Governance Briefing This podcast uses the following third-party services for analysis: OP3 - https://op3.dev/privacy