This website uses cookies

Read our Privacy policy and Terms of use for more information.

Vendor Risk

Incident Response

+2

Special Edition: The security and IP implications of Claude Code’s source leak

Apr 2, 2026

•

15 min read

Special Edition: The security and IP implications of Claude Code’s source leak

A Fieldnotes walkthrough of (1) what happened, (2) why it matters from a security standpoint for both Anthropic and enterprise customers, (3) how the IP story gets mushy when AI-generated authorship enters the chat, and (4) what the next year could look like for Anthropic now that the genie has slipped the bottle

Vendor Risk

+1

Vendor Tiering: Your Vendor List Is Not a Vendor Program

Mar 19, 2026

•

17 min read

Vendor Tiering: Your Vendor List Is Not a Vendor Program

A Fieldnotes guide to vendor privacy reviews that actually reduce risk without turning procurement into a bottleneck.

Vendor Risk

+1

Procurement vs Privacy: The Long-Running Sitcom Where Nobody Laughs

Mar 16, 2026

•

16 min read

Procurement vs Privacy: The Long-Running Sitcom Where Nobody Laughs

How to operationalize vendor intake and triage so review is predictable, fast, and defensible (without arguments).

Incident Response

+5

Acquisitions: When Two Data Inventories Become One Liability

Mar 9, 2026

•

18 min read

Acquisitions: When Two Data Inventories Become One Liability

Post-merger privacy integration basics, and how to pick first-90-days priorities so you do not inherit a data attic as a surprise.

Incident Response

+1

When You Contract with a Vendor, You Don’t Just Entrust Them with Your Data

Feb 24, 2026

•

11 min read

When You Contract with a Vendor, You Don’t Just Entrust Them with Your Data

You also entrust them with your reputation.