When a Government Employee Uses AI, Is It a Public Record?

By |2026-11-10T08:48:52-05:00November 10th, 2026|AI, Data Compliance, eDiscovery|

In 2025 a reporter filed public records requests with cities across Washington State, asking for records of officials using ChatGPT. The requests produced thousands of pages. Among the findings: half of a letter the mayor of Bellingham sent to state authorities had been copied verbatim from the chatbot.  No court has yet published a decision applying FOIA or a state public records act to a government employee’s conversation with an AI chatbot. That does not leave the question open. Prompts entered by public employees doing public business are records made in that connection, outputs received are records received, and several

Read More
Comments Off on When a Government Employee Uses AI, Is It a Public Record?

Europe’s Supermarket Freezer Hack Exposes an IT Governance Gap

By |2026-11-10T08:45:22-05:00November 10th, 2026|Cyber-Security, Safety and Cyber Security, Technology|

A butcher in Athens told Greek television that someone had raised the temperature inside his refrigeration unit to 150 degrees Celsius. A Swedish supermarket found its freezers set to 50. Across France, Belgium, the Netherlands, Sweden, Ireland and Portugal, retailers spent October and November 2026 throwing out food because somebody else was setting the temperature. No zero-day was involved. The compromised refrigeration controllers were internet-exposed, remotely managed by outside contractors, and running firmware nobody had updated. Attackers switched evaporator units into defrost mode, which heats rather than cools. This was not a sophisticated intrusion. It was a governance failure that became visible

Read More
Comments Off on Europe’s Supermarket Freezer Hack Exposes an IT Governance Gap

Your Business Data Has a Junk Drawer

By |2026-10-28T06:00:30-04:00October 28th, 2026|Data Compliance, Information Governance and Management|

Everyone has a junk drawer.  Old batteries. Mystery keys. Charging cables that fit devices nobody owns anymore. You do not know why half of it is there, but nobody wants to throw anything away.  Businesses can treat information the same way.  Files pile up. Email accumulates. Records move between systems. People save another copy because deleting anything feels risky.  Eventually, the business has plenty of information but not enough answers.  What do we have? Where is it? Who owns it? Who can access it? And why are we keeping it?  When does business data become a junk drawer?  Business data

Read More
Comments Off on Your Business Data Has a Junk Drawer

Do You Know Who Still Has Access to Your Data?

By |2026-10-13T09:46:30-04:00October 13th, 2026|Data Compliance, eDiscovery|

Most organizations know who should have access to sensitive business information. The harder question is who still has access because nobody went back and removed it.  People change jobs. Contractors complete projects. Systems change. Access needs also change.  Think of user access like keys to an office building. When someone no longer needs a key, you take it back. Digital access deserves the same discipline.  What is access governance Access governance controls who can reach organizational information and helps the organization decide whether that access remains appropriate. The basic goal is simple: give people access to the information they need

Read More
Comments Off on Do You Know Who Still Has Access to Your Data?

How to Add MFA to Legacy Systems You Cannot Replace 

By |2026-10-13T09:46:50-04:00October 13th, 2026|Cyber-Security, Email security|

Leaving a critical system protected by a password alone creates an identity gap. But replacing every legacy system is not always practical.   The better question is simple: How do you protect the systems the business still needs?  Multi-factor authentication, or MFA, adds another identity check beyond a password. For legacy environments, MFA belongs within a layered defense that also considers network security, monitoring and privileged access.  Think of a legacy system like an old suitcase at the airport. You may still need the suitcase. But you can add another protective layer around it before sending it on its way.  What

Read More
Comments Off on How to Add MFA to Legacy Systems You Cannot Replace 

Your Inbox Is Quietly Feeding Your AI Tools Sensitive Data

By |2026-09-22T05:29:15-04:00September 22nd, 2026|AI, Data Compliance|

Your AI assistant might already know things it shouldn't.  We've written before about the governance gaps AI tools create across your organization: data classification, policy, retention, the whole framework. That's the foundation, and it still applies here. But there's one entry point that deserves its own conversation, because it's the one most employees click through without thinking twice: mailbox access.  Why Your Inbox Is a Different Kind of Risk  File shares and SaaS apps usually have some access structure already in place. Your inbox doesn't work that way. A single mailbox can contain a decade of contract negotiations, client health

Read More
Comments Off on Your Inbox Is Quietly Feeding Your AI Tools Sensitive Data

Extended Security Updates for Exchange Server 2016 and 2019 end on 31 October 2026

By |2026-09-09T09:42:10-04:00September 3rd, 2026|Data Compliance, Email security|

On 20 July 2026 the Exchange Server team answered a question a lot of IT departments had been quietly hoping to hear a different answer to. There will be no Period 3.  Extended Security Updates for Exchange Server 2016 and 2019 end on 31 October 2026. Period 2 was the final window. It cannot be renewed or extended, and enrolled organizations get no further patches after that date, including for a critical vulnerability disclosed on 1 November. Roughly eight weeks from today.  What Does the Period 2 ESU Actually Cover? Less than most people assume. Extended Security Updates deliver only

Read More
Comments Off on Extended Security Updates for Exchange Server 2016 and 2019 end on 31 October 2026

Microsoft 365 Retention Is Not Backup

By |2026-09-09T09:22:47-04:00September 3rd, 2026|Cloud Migration, Microsoft 365|

Ask your IT team whether your Microsoft 365 data is backed up. You will usually get a confident yes.  Then ask a follow-up. What happens if your finance director deletes a mailbox folder in March and nobody notices until June? The confidence tends to fade around that point.  Microsoft 365 retention policies preserve data for compliance. They do not restore it. Under Microsoft's shared responsibility model, Microsoft guarantees platform availability and infrastructure resilience while you remain responsible for the data itself. Standard Microsoft 365 licenses do not include a backup solution, and the native recovery windows are shorter than most organizations assume. Does Microsoft Back Up Your Microsoft 365 Data?  Not in the

Read More
Comments Off on Microsoft 365 Retention Is Not Backup

Did the EU Delay the AI Act? What Changed in 2026

By |2026-08-25T06:59:33-04:00August 25th, 2026|Uncategorized|

Did the EU Delay the AI Act? What Actually Took Effect on August 2, 2026. Did the EU delay the AI Act? Partly. The Digital Omnibus on AI, given final Council approval on June 29, 2026, deferred high-risk obligations for Annex III systems to December 2, 2027. Article 50 transparency obligations were not deferred and took effect on August 2, 2026, exactly as scheduled.   The headline most organizations heard was simpler. "The EU delayed the AI Act." Half true, and imprecise in a way that creates exposure.   What the Digital Omnibus Actually Changed   For more than a year, August 2, 2026 anchored enterprise AI compliance planning.

Read More
Comments Off on Did the EU Delay the AI Act? What Changed in 2026

AI Tools Are Inside Your Organization. Is Your Governance Framework Ready?

By |2026-08-11T10:28:27-04:00August 11th, 2026|Data Compliance, eDiscovery|

When employees use AI tools, whether sanctioned or not, they pull organizational data into environments that may retain it, share it with third parties, or process it in ways that create compliance, eDiscovery, and records management obligations the organization never planned for.  Most organizations are already past the point of deciding whether to allow AI tools. Research published in 2026 found ChatGPT present in 71 percent of UK enterprise IT environments and Microsoft Copilot in 68 percent. The governance question is no longer about adoption. It is about whether the framework underneath can account for what those tools are doing

Read More
Comments Off on AI Tools Are Inside Your Organization. Is Your Governance Framework Ready?

Messaging Architects has been providing professional consulting services around unstructured data and information governance for over 12 years.  Our topnotch experienced project management and engineering team assists organizations to address information risk management strategies, eDiscovery processes, data security and information management policies.    Information is an organizations biggest asset but it can also be that organizations biggest risk.

Go to Top