Blog
Training agenda
ICT Institute provides trainings and workshops on many modern and innovative aspects of IT, both from a business, technical and legal perspective. We have a team of teachers for this purpose, which can illuminate a subject from multiple perspectives. The following training dates are planned: Privacy and GDPR (6 hrs) 17th Apr 2026, 9:45 –…
Pavlo Burda
HCAI-ep 2026: Human-Centered AI in Practice
The Human-Centered AI Education & Practice (HCAI-ep) conference focuses on how to design and evaluate AI systems that remain aligned with human values and real-world constraints. This is exactly where many organisations struggle today, especially in light of emerging regulation such as the EU AI Act. At HCAI-ep, we presented our work on fairness requirements…
Pavlo Burda
Supplier management in ISO 27001
Since suppliers often have access to information assets that are critical to business operations, the ISO 27001 standard dedicates a full set of organizational controls (5.19–5.23) to managing information security risks in supplier relationships. In this article, we explain these controls and provide a supplier register template.
Pavlo Burda
AI Act: Fundamental Rights Impact Assessment (FRIA)
The AI Act has introduced several new rules for the use of AI. One new rule is that organisations must complete a FRIA (Fundamental Rights Impact Assessment) before deploying a high risk AI system. In this article we explain what fundamental rights are, what is considered high risk, FRIA requirements and also share a FRIA…
Sieuwert van Otterloo
Our wishes for 2026: more fairness less presents
The people of ICT Institute are grateful for all the many opportunities we had this year. We had the freedom to pursue our interest and were given opportunities to work for some of the best companies. We want to thank our clients for their trust by donating some of our profits to good causes.
Sieuwert van Otterloo
GDPR and ethics requirements for scientific research with personal data
Scientific research frequently involves collecting and analysing personal data, which brings researchers into direct contact with the GDPR and ethical responsibilities. Yet many researchers struggle to understand GDPR requirements for scientific research, which rules apply and how to implement them in practice.
Pavlo Burda