About¶
I'm Sameer Khairkar, an Information Security Officer working on risk management, AI governance and compliance, with program ownership across EU digital regulation — DORA and the EU AI Act in particular.
This site exists because most writing on EU digital regulation stops at "what the law says." The harder question is operational: which controls, which documents, who owns them, and what evidence proves they work. That's what I build here.
What you'll find¶
The resource library is organized as a tree by regulation — DORA, NIS2, the EU AI Act and GDPR — plus cross-regulation mappings for teams dealing with more than one at once. Everything is built from public and official sources (EUR-Lex, ESA publications, ENISA, EDPB guidance) combined with my own templates.
The blog is where new resources get introduced, roughly one post a week.
Get in touch¶
Disclaimer
All content is my personal, independent work. It does not represent the views of any employer and is not legal advice.