Blog
HCAI-ep 2026: Human-Centered AI in Practice
The Human-Centered AI Education & Practice (HCAI-ep) conference focuses on how to design and evaluate AI systems that remain aligned with human values and real-world constraints. This is exactly where many organisations struggle today, especially in light of emerging regulation such as the EU AI Act. At HCAI-ep, we presented our work on fairness requirements…
Pavlo Burda
What documentation do you need for ISO 27001?
If you want an external auditor to certify your information security management system, you need to store documentation of for all elements in your policy. To make audits to go swiftly and smoothly, you should store all documented information in one easy-to-access place. In this post we provide an overview of what information needs to be stored and…
Sieuwert van Otterloo
Supplier management in ISO 27001
Since suppliers often have access to information assets that are critical to business operations, the ISO 27001 standard dedicates a full set of organizational controls (5.19–5.23) to managing information security risks in supplier relationships. In this article, we explain these controls and provide a supplier register template.
Pavlo Burda
AI Act: Fundamental Rights Impact Assessment (FRIA)
The AI Act has introduced several new rules for the use of AI. One new rule is that organisations must complete a FRIA (Fundamental Rights Impact Assessment) before deploying a high risk AI system. In this article we explain what fundamental rights are, what is considered high risk, FRIA requirements and also share a FRIA…
Sieuwert van Otterloo
Our wishes for 2026: more fairness less presents
The people of ICT Institute are grateful for all the many opportunities we had this year. We had the freedom to pursue our interest and were given opportunities to work for some of the best companies. We want to thank our clients for their trust by donating some of our profits to good causes.
Sieuwert van Otterloo