Berichten in Governance

GARP Interviews Mauritz Kop on Quantum Governance Strategies for Risk Professionals

The Global Association of Risk Professionals (GARP) interviewed Mauritz Kop for David Weldon's article Full-Scale Quantum Computing May Be Years Away. Risk Mitigation Can't Wait.—bringing quantum governance to the desks of risk professionals worldwide.

Q-Day is the wrong question

Kop's message to the risk profession inverts the usual timeline anxiety. The immediate danger is not a cinematic moment when encryption falls; it is the quiet accumulation of harvested data—financial records, identity data, health and government archives—collected today for decryption tomorrow, compounded by weak vendor oversight and a lack of crypto-agility. Records that outlive their cryptography may already face that exposure, whatever the hardware roadmaps say.

Five must-haves for a quantum governance strategy

The strategy Kop laid out is deliberately operational: a PQC migration roadmap anchored in asset classification and harvest-now-decrypt-later exposure; board-level ownership; integration with existing cyber, model, and operational risk frameworks; vendor due diligence on quantum-safety claims; and independent testing and benchmarking instead of marketing trust. Layered across architecture, algorithms, and operations, it treats quantum as an extension of disciplines risk professionals already command—the same principles-to-practice arc as the global quantum policy brief he co-authored at CIGI.

From the trading floor to the boardroom

Quantum, Kop argues, is both threat and tool for finance: it endangers the confidentiality of everything archived, and it is being explored for better simulation, optimization, and risk discovery. His benchmark for the U.S.: core post-quantum migration substantially done before 2030 for long-lived data and critical systems. The institutions that will meet that deadline are the ones whose boards treat quantum readiness as governance, not as someone else's research project.

Meer lezen

Quantum Technology, Governance, CybersecurityMauritz Kop19 december 2025Mauritz Kop, Quantum Governance, Policy, Standards, Post-Quantum Cryptography, GARP, Risk Management, Financial Services, Crypto-Agility, Quantum Technology Impact Assessment

AI Regulation in California: The Daiki SB-53 Recipe for the Transparency in Frontier Artificial Intelligence Act

California's Senate Bill 53—the Transparency in Frontier Artificial Intelligence Act—is the first U.S. law aimed squarely at frontier AI models through a compute threshold. Daiki, the AI and quantum governance company co-founded by Mauritz Kop, has published a practical recipe for complying with it, and for turning compliance into governance capital.

From voluntary principles to enforceable rules

SB-53 marks the moment U.S. artificial intelligence regulation acquired teeth: a compute threshold of 10²⁶ floating-point operations, a "large frontier developer" category above USD 500 million in revenue, published Frontier AI Frameworks, transparency reports on deployment, critical-incident reporting on a fifteen-day (sometimes twenty-four-hour) clock, whistleblower protections, and Attorney General penalties of up to USD 1 million per violation. Most obligations apply from January 1, 2026—which makes readiness a present-tense question, not a planning horizon. Kop has engaged U.S. lawmakers on these trajectories, including consulting Senator Mark Warner on AI and quantum technology policy.

Six steps to SB-53 readiness

The Daiki recipe walks an organization from applicability analysis (model inventory, compute estimation, revenue exposure) through a standards-based governance baseline on ISO/IEC 42001 and the NIST AI RMF, the design of an operational Frontier AI Framework, repeatable transparency-report workflows, incident and whistleblower pipelines, and finally harmonization with the EU AI Act and other regimes—one governance system, not a stack of statute-shaped silos.

Why boards should care

The deeper argument is strategic: a frontier-AI law built on evidence-generating transparency rewards organizations that can prove their safety practices. Boards that treat SB-53 as an opportunity to institutionalize frontier-grade discipline—rather than as an isolated burden—convert a regulatory deadline into trust, resilience, and license to operate.

Meer lezen

Artificial Intelligence, American Law, GovernanceMauritz Kop1 december 2025Mauritz Kop, AI, Regulation, Policy, Daiki, California SB-53, TFAIA, Frontier AI, AI Safety, ISO/IEC 42001, NIST AI RMF

War on the Rocks Publishes "A Bletchley Park for the Quantum Age"

Washington DC, Nov. 6, 2025—War on the Rocks has published a major new commentary by Stanford RQT’s Mauritz Kop, titled “A Bletchley Park for the Quantum Age.” The article translates his broader research on quantum governance into a concrete, operational blueprint for post-quantum cryptography (PQC) migration across the United States and its allies.

Appearing in a venue read closely by practitioners in defence, intelligence, and foreign policy, the piece draws a deliberate conceptual line from the World War II codebreaking effort at Bletchley Park to today’s challenge of securing democratic communications. It argues that Bletchley Park was more than a geographic location; it was a method—an integrated system of science, engineering, operations, and alliance management. Kop contends that a similar methodology is required now to protect national security systems against cryptanalytically relevant quantum computers.

The Enigma Machine utilized a complex series of electromechanical rotors to produce a polyalphabetic substitution cipher, creating an encryption standard that was widely deemed unbreakable by contemporary adversaries. Defeating this system required the Allies to operationalize abstract mathematics into industrial capability, a feat that fundamentally altered the trajectory of the war.

The article situates PQC migration not as a narrow information technology upgrade, but as a core tenet of United States and allied quantum-AI grand strategy. It highlights how flagship programmes such as the United States Department of Defense’s Replicator initiative must be made “quantum-ready” to avoid becoming silently obsolete once large-scale quantum computers arrive.

Professor Kop extends his gratitude to War on the Rocks editor Lieutenant Colonel Walter ‘Rick’ Landgraf, PhD, whose precise editorial work helped sharpen the argument and tailor it to the publication’s strategic readership.

The Core Argument: A Bletchley Method for Post-Quantum Cryptography Migration

The essay begins from a straightforward technical premise. Once fault-tolerant quantum computers exist, Shor’s algorithm will efficiently factor large integers and compute discrete logarithms, thereby breaking the public-key cryptosystems—such as RSA and elliptic-curve cryptography—on which secure communication currently relies. In parallel, Grover’s algorithm will provide a quadratic speed-up in brute-force search, effectively halving the security margin of many symmetric-key schemes.

In this setting, the world’s cryptographic infrastructure cannot simply be patched at the margins. It requires a comprehensive, carefully managed transition to new, quantum-resistant algorithms.

Kop proposes that the United States and its allies apply a “Bletchley method” to this problem by tightly linking:

Domestic execution of PQC migration, and
An allied, standards-based certification compact that prevents fragmentation.

Defensively, this means post-quantum cryptography by default and certified interoperability across critical systems. Politically, it means that Washington earns the right to lead abroad by delivering verifiable results at home.

The framework is organised around two distinct but mutually reinforcing tracks:

Track One – “Ultra at Home”: rigorous domestic execution, and
Track Two – “Allied Codebook Abroad”: international architecture designed to avoid a “quantum splinternet.”

Meer lezen

Mauritz Kop Speaker at United Nations International Year of Quantum Science and Technology 2025

On 31 October 2025, Mauritz Kop, Founder of Stanford RQT (Responsible Quantum Technology), served as one of the main speakers at the North America regional workshop on the Ethical, Legal, and Social Aspects (ELSA) of Broadening Global Ownership of Quantum Technologies. The online workshop was part of the United Nations International Year of Quantum Science and Technology 2025 (IYQ 2025), a year-long initiative mandated by the United Nations General Assembly (UNGA) and led by the United Nations Educational, Scientific and Cultural Organization (UNESCO) to mark 100 years of quantum mechanics and to address the emerging “quantum divide” in access, skills, and infrastructure.

The North America edition was convened by Dr. Zeki C. Seskir and Professor Shohini Ghose as part of a six-region ELSA-of-quantum workshop series. Each regional workshop is feeding into a global IYQ event on the Ethical, Legal, and Social Aspects of Broadening Global Ownership of Quantum Technologies to be held in Istanbul in November 2025.

The program brought together four principal speakers—Mauritz Kop, Bruna Shinohara de Mendonça, Lindsay Rand, and Isabelle Lacroix—and designated commentators Rodrigo Araiza Bravo and Karl Thibault. The workshop closed with an open discussion in which participants reflected on regional needs, expected impact, and the kind of alignment that is necessary for a fair and secure quantum future.

The International Year of Quantum and the North America ELSA Workshop

The International Year of Quantum Science and Technology 2025 was proclaimed by the United Nations General Assembly in June 2024. The resolution calls on states and international organizations to use 2025 to raise public awareness of quantum science, promote education and capacity-building—especially in the Global South—and strengthen cooperation so that all countries can participate in and benefit from quantum technologies.

Within this broader mandate, the ELSA of Broadening Global Ownership of Quantum Technologies initiative focuses on quantum governance. The North America workshop was explicitly framed around three questions:

Which ethical, legal, and social aspects of quantum technologies are most urgent for North America today?
Which ELSA topics are most important globally?
How should the future of ELSA and related policy implications be shaped in Europe, North America, and worldwide, and what forms of alignment are needed?

The three-hour program opened with an overview of the IYQ ELSA event series, followed by the four invited talks, a short break, and then a structured discussion and closing reflections.

From ELSA to ELSPI: A Metaparadigm for Quantum Governance

Kop’s keynote, “From ELSA to ELSPI: A Metaparadigm for Quantum Governance,” drew on his recent work on Quantum-ELSPI and Responsible Quantum Technology, including Quantum-ELSPI: A Novel Field of Research; Ten Principles for Responsible Quantum Innovation (co-authored with, among others, Raymond Laflamme); and his legislative blueprint Towards a European Quantum Act.

He began by defining Quantum-ELSPI (co-developed with Luciano Floridi then at Oxford, now at Yale) as the study of Ethical, Legal, Socio-economic, and Policy Implications of quantum technologies. Classical ELSA—Ethical, Legal, and Social Aspects—was designed for more conventional technologies and, in his view, is too narrow for quantum systems that combine:

Dual-use components that can be deployed for both civilian and military purposes;
Long security horizons, where sensitive data captured today may be decrypted decades later by cryptanalytically relevant quantum computers; and
Fragile supply chains, in which a handful of materials, cryogenic systems, or photonic components create systemic bottlenecks.

To address this, Kop articulated three foundational pillars of the Quantum-ELSPI metaparadigm, developed in a recent Science article with co-authors Mateo Aboy, Urs Gasser, Glenn Cohen, and others:

Standards-First Governance
Technical and assurance standards—such as post-quantum cryptography (PQC) profiles, quantum quality-management systems, and certification schemes—are treated as the primary vehicle for embedding values into systems. Law, policy, and institutional design are built around these standards rather than attempting to regulate hypothetical risks in the abstract.
Execution-Oriented Ethics
Ethics is framed as a delivery problem. Instead of high-level value statements, Kop emphasized auditable supply chains, post-quantum cryptography migration drills, and verifiable deployment metrics in sectors such as finance, health care, and government archives. Ethics, in this sense, is measured by what actually ships and how it behaves under stress.
Planetary Welfare
The third pillar reframes quantum technologies not only as instruments of national competitiveness or military advantage, but as ecological and health technologies. Quantum-ELSPI is thus aligned with the Sustainable Development Goals (SDGs), emphasizing applications in climate modeling, clean-energy materials discovery, quantum-enabled medical technologies, and resilient humanitarian communications.

Taken together, these pillars elevate Quantum-ELSPI from a narrow ethics add-on to a metaparadigm for governing the entire quantum stack—from materials and cryogenic infrastructure to cloud-based access, algorithms, and hybrid quantum–classical systems.

Meer lezen

Governance, Quantum ELSPI, Stanford RQTMauritz Kop31 oktober 2025United Nations, Quantum-ELSPI, Ethics, Law, Policy, Governance, UNESCO, OECD, IYQ 2025, Geopolitics, Societal Impact, Innovation, Science, Mauritz Kop, Stanford RQT

Mauritz Kop Teaches Quantum Governance at the United States Air Force Academy

Mauritz Kop, Founder of the Stanford Center for Responsible Quantum Technology, returned to the United States Air Force Academy—where he serves as guest professor—to teach cadets a class titled Responsible Quantum Technology: Establishing a Legal-Ethical Framework. The session began with the physics and moved to the geostrategic, legal, and ethical architecture the field will need as it matures, addressing two questions the cadets had prepared: why govern quantum before it is mature, and what framework best balances innovation against risk.

From the mechanics to the law

The lecture grounded its policy argument in the physics of the second quantum revolution. Where classical systems encode definite bits, quantum systems exploit superposition, entanglement, and tunneling to unlock new categories of capability across computing, sensing, simulation, and networking—from drug discovery and novel materials to jam-resistant navigation and physically grounded secure communications. The same properties that make the technology powerful, Kop argued, strain a legal order built on certainty, locality, and linear causality, which is why quantum governance calls for a tailored, sui generis approach rather than a retrofit of existing rules. The themes extend the line of work Kop set out in Establishing a Legal-Ethical Framework for Quantum Technology.

Why govern before maturity

On the cadets' first question, Kop drew on the Collingridge dilemma—control is easiest early, when knowledge is limited but options remain open—and on his metaphor of a quantum event horizon, a threshold beyond which technological lock-in makes the path far harder to redirect. Acting while the technology is still malleable, he argued, is not a brake on innovation but a precondition for steering it toward democratic values, public trust, and the legal certainty that long-horizon research and investment depend on.

A two-pillar framework

To the second question, Kop offered an integrated two-pillar response: agile, risk-based regulation that tiers obligations by an application's risk, paired with a strategic industrial and security policy that builds national capacity—funding across the lab-to-market pipeline, supply-chain resilience for critical minerals and components, talent development, and shared research infrastructure. This is the operational form of the Responsible Quantum Technology framework, organized under the SEA principles of safeguarding, engaging, and advancing the technology, and aimed at steering innovation rather than slowing it.

Dual-use and deterrence

For future Air Force and Space Force officers, the dual-use character of quantum technology was the connecting thread. The most acute near-term concern is the cryptographic threat—"Q-Day" and "Harvest Now, Decrypt Later"—which makes the migration to post-quantum cryptography a present-tense security task. Set against great-power competition, Kop's prescription is deliberate stewardship: embedding democratic values into standards early, protecting research from state-sponsored theft, and cooperating with allies, themes he has also brought to venues including the Hoover Institution. The class closed on the conviction that technology's trajectory is a matter of choice, and that engaging its technical, strategic, legal, and ethical dimensions is a core professional responsibility for the officers who will shape these systems.

Meer lezen

Teaching, Quantum Technology, GovernanceMauritz Kop23 oktober 2025Mauritz Kop, Quantum Governance, Stanford RQT, National Security, Governance, Policy, Quantum-ELSPI, Standards, US Air Force Academy, Teaching, Dual-Use, Post-Quantum Cryptography

Mauritz Kop Awarded Senior Fellowship at Leading G7 Think Tank CIGI Waterloo

Mauritz Kop, founder of the Stanford Center for Responsible Quantum Technology (RQT) and a guest professor at the US Air Force Academy (USAFA), has been appointed a senior fellow at the Centre for International Governance Innovation (CIGI), a leading Canadian G7 think tank with a global reputation for impactful research and policy advice. This fellowship marks a significant new chapter in Professor Kop's work, allowing for a deeper dive into the intricate and rapidly evolving nexus of quantum technology, artificial intelligence (AI), intellectual property (IP) law, competition policy, and national security. The initial project will focus on developing a comprehensive roadmap for navigating this complex landscape, building on previous engagement with CIGI and long-standing academic and professional connections with Canada.

Mauritz Kop Appointed Senior Fellow at CIGI: A New Chapter in Quantum Governance and Global Security

This CIGI senior fellow appointment is not just a personal honour, but a testament to the growing global recognition of the urgent need for innovative governance models to steer the development of powerful dual-use technologies towards beneficial outcomes for humanity. The challenges are immense, but so are the opportunities. In a world grappling with geopolitical instability and the disruptive potential of emerging technologies, CIGI’s mission to build bridges from knowledge to power has never been more critical. Kop is thrilled to contribute to this mission and to collaborate with CIGI’s distinguished team of experts.

Building on a Foundation: The Dual-Use Project and Previous Engagements

Professor Kop's journey with CIGI began prior to this fellowship, with a seminar delivered on the governance of dual-use quantum technologies. That lecture, titled “Responsible Quantum AI Governance: From Ethical Principles to Global Frameworks,” set the stage for the work he is about to undertake. In that presentation, he argued that we are approaching a “Quantum Event Horizon”—a critical juncture beyond which our ability to shape the trajectory of advanced quantum and AI systems may be irrevocably lost. The core of Kop's argument was that traditional governance models and diplomatic efforts are insufficient to address the systemic challenges posed by a global, high-stakes race for quantum supremacy.

The seminar explored the necessity of a multi-layered governance strategy. This includes not only the development of robust international legal frameworks and oversight bodies, drawing inspiration from nuclear non-proliferation treaties, but also the integration of “Quantum-Resistant Constitutional AI” to hardwire universal values into the technology itself. This dual approach, grounded in the principles of responsible innovation, is essential to mitigate the risks of misuse by state and non-state actors, and to ensure that these technologies serve to enhance, rather than undermine, democratic societies.

The positive reception to these ideas and the stimulating discussions that followed with the CIGI community laid the groundwork for this senior fellowship. It became clear that there was a shared understanding of the stakes involved and a common commitment to forging a path towards a safe and equitable quantum future. This fellowship provides the ideal platform to transition from articulating these principles to developing concrete, actionable policy recommendations.

A New Frontier: IP, Competition Law, Quantum, Dual-Use, and National Security

Professor Kop's first project as a CIGI Senior Fellow will be an in-depth analysis of the critical nexus between quantum technology, AI, IP policy, and national security strategy. The convergence of quantum and AI capabilities presents unprecedented challenges for global innovation and strategic stability, most notably the looming threat of “Q-Day,” when a sufficiently powerful quantum computer could break most of the public-key cryptography that underpins our digital world.

This project will draw lessons from historical precedents, particularly the governance of nuclear technology, to inform the development of novel frameworks for quantum governance. A key component of the research will be a comparative analysis of quantum IP strategies across the dominant tech blocs, examining how different approaches to patents, trade secrets, and state secrets are shaping the global quantum race.

Meer lezen

Quantum Technology Governance: The Daiki Quantum Governance Recipe and the World's First QT-QMS

Quantum technology arrives with a governance problem unlike the one that classical computing posed. The systems are powerful, dual-use, and—at the hardware level—physically fragile in ways that ordinary quality regimes never had to model. Daiki, the AI and quantum governance company co-founded by Mauritz Kop, has published the Daiki Quantum Governance Recipe to close that gap: a toolkit that turns responsible-innovation principles into an auditable management system, anchored by what Daiki calls the world's first Quantum Technology Quality Management System (QT-QMS).

A management system for a fragile technology

The QT-QMS is a coined framework, extending to quantum the system-level discipline that ISO 13485 brought to medical devices and ISO/IEC 27001 to information security. The case for a dedicated discipline is physical as much as legal: quantum information lives in fragile superposition states that decoherence degrades on short timescales, and measurement is irreversible, so fidelity, error rates, and calibration drift become first-order operational facts. A quality system built for classical software simply does not have vocabulary for these failure modes, which is why Daiki argues quantum needs a management standard of its own.

Three ingredients, one auditable trail

The Recipe is built around three pillars. A QMS Backbone supplies the ISO-aligned, auditable framework for quality and risk management, integrating ISO/IEC 27001, 27005, and 42001 alongside the proposed QT-QMS. An Ethical Compass operationalizes the Ten Principles for Responsible Quantum Innovation—grouped as Safeguarding, Engaging, and Advancing—through checklists, templates, and guided assessments. An Assessment Engine automates Quantum Impact Assessments across the lifecycle, logging every decision into a time-stamped audit trail that spans ex-ante, ex-durante, and ex-post review. Daiki frames the synthesis of the three as a path to Quantum-Resistant Constitutional AI: systems hardened against quantum attack and bound to an enforceable set of values.

Standards first, regulation later

The Recipe rests on a standards-first philosophy—voluntary, consensus-driven standards as the most workable foundation for a fast-moving field—and situates that approach inside a four-stage cycle running from principles through soft law to hard law. That sequencing matters for timing: by building governance on standards already taking shape through ISO/IEC Joint Technical Committee 3, IEEE, and NIST's post-quantum cryptography work, organizations turn today's best practices into tomorrow's compliance evidence as binding frameworks such as a future EU Quantum Act emerge. Daiki points toward system-level certification of a company's QT-QMS by an accredited body, on the medtech model, as the longer-term destination.

Why it matters now

The deeper argument is one of timing and proof. Quantum governance, like AI governance before it, is moving from voluntary commitment to a documented, auditable function—and the organizations best placed for that shift are the ones building a single coherent management system now, rather than assembling a reactive checklist once enforcement arrives. For a quantum ecosystem dominated by startups and research labs, the Recipe's promise is to lower the cost of doing this well, so that responsibility and speed stop being a trade-off.

Meer lezen

Quantum Technology, Governance, CertificationMauritz Kop8 augustus 2025Mauritz Kop, Quantum Governance, Standards, Governance, Stanford RQT, Ethics, Daiki, QT-QMS, Responsible Quantum Technology, ISO/IEC 42001, Quantum Impact Assessment, Quantum-Resistant Constitutional AI, EU Quantum Act

A Standards-First Future for Quantum Governance

Stanford, CA, August 7, 2025—A star team of leading interdisciplinary scholars from the Universities of Cambridge, Harvard, Munich, and Stanford has today published a landmark paper in the prestigious journal Science, outlining a novel and proactive framework for the global governance of quantum technologies. The Science Policy Forum piece titled "Quantum technology governance: A standards-first approach," was led by Professor Mateo Aboy of Cambridge with senior authorship by Mauritz Kop of Stanford. The paper introduces a "Standards-First" approach to regulation, emphasizing the urgent need for harmonized global standards and Quantum Technology Quality Management Systems (QT-QMS). The publication in Science is the culmination of years of dedicated research, synthesizing key takeaways from our annual Stanford RQT Conference and building on thought leadership established in outlets like Nature.

The paper, co-authored by a team representing the very model of interdisciplinary excellence we advocate for - including distinguished professors I. Glenn Cohen of Harvard Law School and Urs Gasser of the Technical University of Munich, addresses one of the most pressing challenges of the quantum age: how to foster innovation responsibly while mitigating the risks of geopolitical fragmentation and a potential "race to the bottom" in safety and ethics.

The core of our argument is the necessity of a "Standards-First" philosophy. Rather than waiting to apply reactive, and often conflicting, national regulations, we contend that the international community must prioritize baseline global standards before quantum technologies become deeply entrenched. This proactive approach aims to prevent a "quantum splinternet"—a fractured ecosystem of incompatible protocols and norms that could stifle innovation and exacerbate international tensions.

The Quantum Technology Quality Management System (QT-QMS)

Building on this, the paper introduces a practical framework: the Quantum Technology Quality Management System (QT-QMS). Drawing from established standards in high-consequence industries like medicine and aerospace, QT-QMS provides a clear, certifiable pathway for building safe and reliable quantum products. It translates high-level ethical principles into concrete, operational processes for risk management, lifecycle auditing, and supply chain integrity, simplifying future regulatory efforts.

As senior author Mauritz Kop notes, “Publishing this governance framework in a leading science journal like Science underscores our central message: getting quantum governance right is not just a task for lawyers and policymakers, but an essential, collaborative effort that must deeply involve the scientists and engineers who are building this future. We must embed our shared values directly into the architecture of quantum systems.”

The research provides a clear-eyed analysis of the current global landscape and presents a tangible roadmap for building a stable, interoperable, and responsible quantum ecosystem. By championing a global "race to the top" built on quality, safety, and trust, the framework proposed by Aboy, Gasser, Cohen, and Kop aims to ensure that the profound benefits of the quantum revolution are realized for all groups of our societies.

Charting the Future of Quantum Governance: Our Vision for a Standards-First Approach in Science

Our new Policy Forum piece in Science, titled "Quantum technology governance: A standards-first approach," represents a milestone for our team and for the broader conversation around the future of technology policy. It is the culmination of years of dedicated research, building upon a trajectory of thought leadership established through leading platforms like Nature, and with distinguished academic communities at Stanford, Harvard, Yale, MIT, Berkeley, Oxford, Cambridge, Waterloo, Copenhagen, the Max Planck Institute, and TUM Munchen. This work synthesizes key takeaways from our annual Stanford RQT Conference under Faculty leadership of Professor Mark Lemley, where global leaders convene to tackle these complex issues.

At its core, this piece is a testament to the power of interdisciplinary collaboration. It brought together an all-star team of scholars, each a recognized leader in their respective domain, to forge a unified vision for a more agile, innovative, and secure quantum future.

Meer lezen

Governance, Quantum Technology, Stanford RQTMauritz Kop7 augustus 2025Science, Nature, Quantum Governance, Standards-First, Certification, QT-QMS, Regulation, Stanford RQT, Cambridge, Harvard, Munchen, Mateo Aboy, I. Glenn Cohen, Urs Gasser, Mauritz Kop

EU AI Act Compliance for Global Enterprises: The Daiki Solution for Mandatory AI Governance

The European Union's AI Act has crossed the line from proposal to binding law, and its phased rollout is now an active clock rather than a distant horizon. Daiki, the AI and quantum governance company co-founded by Mauritz Kop, has published an account of what mandatory AI governance demands of global enterprises—and how an integrated, standards-based platform can convert that obligation into a strategic advantage.

A calendar that has already started

The Act entered into force on August 1, 2024. The prohibition on unacceptable-risk practices took effect in February 2025; obligations for general-purpose AI models began in August 2025; and full application—conformity assessments, CE marking, EU-database registration, post-market monitoring for high-risk systems—arrives on August 2, 2026, with a final grace period for regulated-product components running to 2027. Because the Act binds any provider whose systems reach the EU market or whose outputs are used within it, its reach is extraterritorial: a firm headquartered in New York or Singapore is squarely within scope, and penalties of up to €35 million or 7% of worldwide turnover make non-compliance a board-level risk.

The pyramid of criticality

The Act's organizing idea is a risk-based pyramid: unacceptable-risk practices are banned; high-risk systems—reaching common enterprise uses in hiring, credit scoring, and critical infrastructure—carry the heaviest lifecycle obligations; limited-risk systems owe transparency; and minimal-risk applications attract no new mandates. The Daiki solution operationalizes that structure, classifying each system through a rules engine aligned with the Act's definitions and Annex III, then triggering a workflow proportionate to its tier, with every action logged to an auditable evidence trail. Its architecture is anchored in ISO/IEC 42001, bridged to the NIST AI Risk Management Framework, and bounded throughout by deliberate human oversight—mirroring the Act's own Article 14.

A risk-based reading with a documented lineage

The post's central reading—that a risk-based regime rewards organizations able to prove their governance—has a clear history in Kop's scholarship. As Mauritz Kop's record of work shows, his 2021 analysis of the EU AI Act anticipated the four-tier architecture that is now law, and the same logic carries across the Atlantic to California's compute-threshold approach for frontier models. For general counsel and compliance leaders, the practical takeaway is consistent: build one coherent, standards-based governance system now—rather than a reactive checklist per statute—and the era of enforcement will reward exactly the discipline the era of voluntary principles merely recommended. Mandatory AI governance, as the post observes, is here to stay; the enterprises that treat it as design rather than damage control will be the trusted artificial intelligence leaders of the regulated decade ahead.

Meer lezen

Artificial Intelligence, European Law, GovernanceMauritz Kop23 juni 2025Mauritz Kop, AI, Regulation, Policy, Governance, Standards, Daiki, EU AI Act, AI Governance, ISO/IEC 42001, NIST AI RMF, Brussels Effect, Risk-Based Regulation, Frontier AI

The US ISO 42001 Standards-Centric Approach to AI Governance: Compliance, Trust, and Innovation (Daiki Repost)

AIRecht reposts, in full and with permission, a Daiki essay by Mauritz Kop, Co-Founder, on why the United States is converging on a standards-centric model of artificial intelligence governance—and why ISO/IEC 42001 has become its anchor. The repost is presented as published on May 13, 2025, with its original spellings, figures, and references intact.

A standards-first answer to a fragmented regime

The American approach to AI is, by design, light on binding federal statute and heavy on voluntary, risk-based guidance: the NIST AI Risk Management Framework, sector-specific direction from the FTC, EEOC, and FDA, and a patchwork of state laws. Into that fragmentation steps ISO/IEC 42001, the world's first international standard for AI Management Systems, published in December 2023. The essay's argument is that a single, certifiable management system can do what a stack of statute-shaped checklists cannot—give an organization one coherent governance posture that travels across jurisdictions.

The transatlantic bridge

The stakes are clearest for U.S. companies selling into Europe. ISO 42001 certification is not the same as EU AI Act compliance, but the two overlap heavily on risk management, data governance, transparency, documentation, and human oversight—precisely the obligations the Act imposes on high-risk systems. The repost frames the standard as a "common language" that lets a U.S. firm demonstrate diligence to European regulators and partners without building a separate compliance machine for each market. It is the same standards-first logic Kop and colleagues have argued for in quantum governance, where international standards substitute for legislation that has not yet caught up to the technology.

From paperwork to governance asset

The closing move is strategic rather than procedural. Under an anticipated period of U.S. federal deregulation, the essay contends, a globally recognized standard offers stability that domestic political cycles cannot: a baseline of good governance that holds regardless of which executive orders survive. The Daiki method then operationalizes that posture through six integrated components—an AI system registry, an EU AI Act toolkit, an ISO 42001 implementation framework, ISO 27001 data-security integration, MDR/ISO 13485 support for medical AI, and a responsible generative-AI framework—so overlapping requirements are managed once, not many times. The throughline connects to Daiki's wider body of work on operationalizing regulation, including its EU AI Act compliance solution and its quantum-governance recipe.

Why repost it here

For boards, general counsel, and AI program leads, the practical message is that the era of principles is giving way to an era of evidence: organizations will increasingly be asked to prove their governance, not merely assert it. Reposting the essay in full preserves Kop's argument verbatim while placing it alongside AIRecht's running coverage of Mauritz Kop's work at the intersection of AI, standards, and responsible technology governance.

Meer lezen

Mauritz Kop Delivers Keynote on Global Quantum Governance Frameworks at the World Quantum Summit in Washington DC

At the World Quantum Summit in Washington, DC, held during DC Climate Week on May 2, 2025, Mauritz Kop, Founder of the Stanford Center for Responsible Quantum Technology, delivered a keynote on Global Quantum Governance Frameworks. The address landed in a symbolic year—the centennial of quantum mechanics and the International Year of Quantum Science and Technology—and made a single, sustained argument: that quantum's distinctive physics demands tailored governance, and that the world should cooperate to unlock quantum for societal progress rather than fracture into rival blocs.

A fragmented compliance web—and a standards-first answer

Kop's diagnosis is that developers of quantum and hybrid systems already face a fragmented web of regional and global requirements, from export controls to sector-specific rules supported by standards, certifications, and quality-management systems. His remedy is unified quantum interoperability standards to avert a "quantum splinternet," paired with the Responsible Quantum Technology (RQT) framework and its benchmarks. This standards-first posture—building technical consensus before locking in less adaptable legislation—runs through his scholarship on responsible quantum innovation, including the Ten Principles for Responsible Quantum Innovation published in IOP Quantum Science and Technology.

Benefits, risks, and Quantum-ELSPI

The keynote mapped quantum's promise and peril by domain. On the benefit side, Kop aligned responsible quantum innovation with the UN Sustainable Development Goals—drug discovery, weather forecasting, battery chemistry, carbon capture. On the risk side, he flagged "Q-day," when current RSA and AES encryption fails, alongside dual-use ambiguity in quantum simulation and sensing. These interrelated ethical, legal, socio-economic, and policy implications form what he calls Quantum-ELSPI, the lens through which he argues quantum should be governed in line with civil liberties, human rights, and the rule of law.

An Atomic Agency for the quantum age

The address built toward an institutional proposal: a globally harmonized "Quantum Acquis Planétaire," a UN Quantum Treaty modeled on the 2024 UN AI Resolution and the 1968 Nuclear Non-Proliferation Treaty, and an "Atomic Agency for Quantum/AI" inspired by the IAEA's safeguards model, complemented by CERN-style international resource pooling. The keynote is distinct from Kop's role as a speaker for the International Year of Quantum Science and Technology 2025: that recognition concerns the year's designation, whereas this address sets out the specific governance architecture he believes the quantum age now requires. His central claim is that the architecture must be designed today—before second-generation, agentic quantum and AI systems outpace the law—and that it should be standards-first, rights-respecting, and global by construction, so that quantum technology serves a collective future of widespread, equitably distributed prosperity.

Meer lezen

Mauritz Kop Expert at Eric Schmidt backed von Neumann Commission

Stanford, CA – Mauritz Kop, the Frm. Founding Executive Director of the Stanford Center for Responsible Quantum Technology (RQT), has accepted an invitation to serve as an expert on The von Neumann Commission. The announcement, made on February 1, 2025, positions Kop to contribute to a critical global dialogue at the intersection of quantum computing, artificial intelligence, and grand strategy. The Oxford-based, independent research commission is backed by the Eric and Wendy Schmidt Fund for Strategic Innovation and other key institutions. The von Neumann Commission’s inquiry will be multifaceted, addressing the core technical prospects for quantum acceleration, its strategic implications for the global balance of power, the risks to strategic stability, and the necessary governance frameworks to ensure responsible development. The Commission's investigation is set against the backdrop of a new technological paradigm—the convergence of quantum and AI—and is informed by the historical legacy of its namesake, the strategic vision of its sponsors, and the vital perspectives of its experts.

The Quantum-AI Convergence: A New Technological Paradigm

At the heart of The von Neumann Commission's inquiry is the powerful synergy between quantum computing and artificial intelligence. This convergence is not merely additive; it is a cross-pollination that promises to redefine the boundaries of both fields. To understand this, one must first grasp the fundamental difference between classical and quantum computation.

Classical computers, from supercomputers to smartphones, process information using bits, which can exist in one of two definite states: 0 or 1. Quantum computing, by contrast, operates on the principles of quantum mechanics. It uses qubits, which can exist in a state of superposition—representing both 0 and 1 simultaneously. This property, combined with entanglement, where the state of one qubit is instantly correlated with another regardless of distance, allows quantum computers to explore a vast computational space and perform parallel calculations on an exponential scale.

Professor Kop’s Expertise as a von Neumann Commissioner

As a Commission expert, Professor Kop will contribute a multidisciplinary perspective grounded in his extensive research on the law, ethics, societal impact, and policy of quantum and AI. Professor Kop has advised numerous governments and international organizations on their quantum technology strategies, including the United States (notably the Department of State on its quantum foreign policy, U.S. Senators on quantum governance, and as a Guest Professor at the US Air Force Academy), Canada, the United Kingdom, and The Netherlands, as well as multilateral institutions such as the World Economic Forum (WEF), UNESCO, CERN, and the OECD. He has also provided expert guidance to the European Union on landmark AI legislation, including the EU AI Act and the Data Act. His specific contributions to The von Neumann Commission will draw from his expertise in:

● Geostrategy, Democracy, and Authoritarianism: Analyzing the strategic struggle between democratic and authoritarian models of technology governance. This includes his work in Foreign Policy and the Stanford-Vienna Transatlantic Technology Forum on forming a strategic tech alliance among democratic nations and his lectures at institutions like the Hoover Institution on the impact of quantum technologies on the global balance of power.

● Comparative Regulatory and Innovation Models: Analyzing the legal and policy differences between the US, EU, and China. His scholarship, including his "Ten principles for responsible quantum technology" in IOP Quantum Science and Technology, his “Establishing a Legal-Ethical Framework for Quantum Technology” at Yale University, and foundational articles at Harvard Berkman Klein and Nature, dissects these competing models and provides a crucial framework for navigating global strategic competition.

● China’s Quantum and AI Strategy: Providing in-depth analysis of China's legal, ethical, and policy landscape for quantum technologies. This includes evaluating the country's national strategy, its approach to dual use civil-military fusion, its influence on U.S. and E.U. national and economic security through China’s Digital Silk Road Initiative, and its comparative strengths and weaknesses in the global technology race, as analyzed in his “Towards an Atomic Agency for Quantum-AI” scholarship at the European Commission’s Futurium.

● National and Economic Security: Examining the role of export controls, rare earth and critical mineral supply chain vulnerability as published at the Stanford Program on Geopolitics, Technology, and Governance at CISAC / FSI, intellectual property law as published at Berkeley and the Max Planck Institute, and cybersecurity in managing the geostrategic dimensions of quantum technology. His work in these areas, including his contributions to forums like Tel Aviv University's Cyber Week, provides critical insights into protecting strategic assets.

● Standards and Governance: Contributing to the development of robust standards, certification protocols, and performance benchmarks to ensure the safety, reliability, and ethical implementation of these powerful technologies, drawing from lessons from nuclear governance, and from his conferences and seminars at Stanford, Fordham Law, Arizona State, Copenhagen, the Center for Quantum Networks (CQN) and the Centre for International Governance Innovation (CIGI) in Waterloo.

By integrating these insights, Kop will aid the Commission in formulating a holistic understanding of the challenges pertaining to systemic rivalry and great power competition ahead.

Meer lezen

Think Tank, Stanford RQT, GovernanceMauritz Kop1 februari 2025von Neumann Commission, Eric Schmidt, Quantum-AI, Great Power Rivalry, Geostrategic Competition, Game Theory, Law, Ethics, Policy, Philosophy, Stanford RQT, Harvard, Yale, Oxford, Mauritz Kop

Blog over Kunstmatige Intelligentie, Quantum, Deep Learning, Blockchain en Big Data Law

Q-Day is the wrong question

Five must-haves for a quantum governance strategy

From the trading floor to the boardroom

From voluntary principles to enforceable rules

Six steps to SB-53 readiness

Why boards should care

The Core Argument: A Bletchley Method for Post-Quantum Cryptography Migration

The International Year of Quantum and the North America ELSA Workshop

From ELSA to ELSPI: A Metaparadigm for Quantum Governance

From the mechanics to the law

Why govern before maturity

A two-pillar framework

Dual-use and deterrence

Mauritz Kop Appointed Senior Fellow at CIGI: A New Chapter in Quantum Governance and Global Security

Building on a Foundation: The Dual-Use Project and Previous Engagements

A New Frontier: IP, Competition Law, Quantum, Dual-Use, and National Security

A management system for a fragile technology

Three ingredients, one auditable trail

Standards first, regulation later

Why it matters now

The Quantum Technology Quality Management System (QT-QMS)

Charting the Future of Quantum Governance: Our Vision for a Standards-First Approach in Science

A calendar that has already started

The pyramid of criticality

A risk-based reading with a documented lineage

A standards-first answer to a fragmented regime

The transatlantic bridge

From paperwork to governance asset

Why repost it here

A fragmented compliance web—and a standards-first answer

Benefits, risks, and Quantum-ELSPI

An Atomic Agency for the quantum age

The Quantum-AI Convergence: A New Technological Paradigm

Professor Kop’s Expertise as a von Neumann Commissioner

Juridische diensten en projecten in Nederland en daarbuiten