The monthly bulletin

One email, last week of each month. What moved across the compliance and security regulators that month, what auditors will start asking about, what to put on the next board update agenda. Written for CISOs, DPOs, GRC analysts, IT auditors, and compliance consultants who would rather skim 1,500 words once a month than monitor twenty regulators continuously.

What you'll get

• What changed. EU AI Act developments, DPBI complaint patterns, RBI / SEBI / IRDAI inspection trends, CERT-In directives, US state privacy enforcement, NIS 2 and DORA developments. Written tightly, no padding.
• What auditors will ask about. The intensification themes regulators are signalling. Specific control areas to verify before the next inspection or audit cycle.
• What to put on the board agenda. Three to five items per month worth raising with the audit committee or executive team.
• Cross-jurisdiction synthesis. When the same theme is hitting EU, India, and the US in different forms, the connection is surfaced. Single specification, multiple regulators.

Past issues

• May 2026 — broad regulatory sweep, ten items
• Early June 2026, issue 02 — EU AI Act Omnibus, DPBI six-month pattern, RBI CIMS supervisory action
• May 2026 — curated top-5 digest format

Who writes it

The ControlForge content team. Twelve years of practitioner experience across CISO, DPO, audit, and consulting roles in India, Europe, and the US. Cross-mapped against forty-five published guides and 1,932 controls in the live knowledge base.

FAQ

How often will I hear from you?

Once a month for the monthly bulletin. Occasional ad-hoc updates if something material moves between issues (e.g., a Schrems-style ruling, a major DPBI penalty, an AI Act emergency measure). Never more than four emails a month, typically just one.

What do you do with my email?

Send you the bulletin. Nothing else. No sharing with third parties, no profile selling, no marketing partner enrichment. The email lives in the newsletter platform's database and is removed when you unsubscribe.

Is it free?

Yes. The bulletin is free for individual practitioners. A premium tier (currently in development) will include within-72-hour briefings on material regulatory moves, premium-only deep analyses, and direct Q&A with the editorial team. The monthly bulletin will remain free.

Can I forward issues to my team?

Please do. We do not enforce any forwarding restrictions on the free tier. If your whole team finds it useful, ask them to subscribe directly so they can manage their own preferences.

Will you publish content from this site under a different brand?

No. Everything published here remains under ControlForge attribution. We may license specific guide content to other GRC platforms as syndication, but the publication on this site stays canonical.