<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="//blog.controllayer.ai/sitemap.xsl"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1"><url><loc>https://blog.controllayer.ai/an-ai-policy-is-not-an-ai-control/</loc><lastmod>2026-10-16T19:37:16.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/healthcare-breaches-are-holding-steady-in-count-and-growing-in-size/</loc><lastmod>2026-10-15T17:15:04.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/ai-regulatory-intelligence-tracker/</loc><lastmod>2026-10-14T12:13:15.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/the-patient-cost-of-a-healthcare-data-breach/</loc><lastmod>2026-10-12T17:40:30.000Z</lastmod><image:image><image:loc>https://blog.controllayer.ai/content/images/2026/09/image-2.png</image:loc><image:caption>image-2.png</image:caption></image:image></url><url><loc>https://blog.controllayer.ai/the-hipaa-security-rule-update-where-things-actually-stand/</loc><lastmod>2026-10-12T17:39:37.000Z</lastmod><image:image><image:loc>https://blog.controllayer.ai/content/images/2026/07/Screenshot-2026-07-04-at-7.42.09---PM.png</image:loc><image:caption>Screenshot-2026-07-04-at-7.42.09---PM.png</image:caption></image:image></url><url><loc>https://blog.controllayer.ai/were-building-ai-governance-for-a-regulator-that-hasnt-shown-up/</loc><lastmod>2026-10-12T17:38:31.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/information-blocking-enforcement-is-moving-what-healthcare-leaders-should-know/</loc><lastmod>2026-10-05T01:35:59.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/human-review-is-a-control-only-when-you-can-prove-it-worked/</loc><lastmod>2026-10-01T18:35:22.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/why-i-support-mandatory-standards-independent-audits-and-1-3-billion-for-healthcare-cybersecurity/</loc><lastmod>2026-09-28T19:45:41.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/the-2026-hipaa-security-rule-update-what-business-associates-need-to-do-now/</loc><lastmod>2026-09-25T22:27:46.000Z</lastmod><image:image><image:loc>https://blog.controllayer.ai/content/images/2026/07/Screenshot-2026-07-04-at-6.14.01---PM.png</image:loc><image:caption>Screenshot-2026-07-04-at-6.14.01---PM.png</image:caption></image:image></url><url><loc>https://blog.controllayer.ai/your-hospitals-ai-is-paid-to-find-sickness/</loc><lastmod>2026-09-25T20:41:30.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/the-onc-security-risk-assessment-tool-is-better-than-it-used-to-be-its-still-not-good-enough/</loc><lastmod>2026-09-15T18:16:14.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/hipaas-deadline-moved-to-2027-ocr-isnt-waiting/</loc><lastmod>2026-09-08T17:55:51.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/ransomware-will-keep-winning-until-we-change-the-math/</loc><lastmod>2026-09-08T17:53:46.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/ocr-stopped-grading-whether-you-did-the-homework-now-it-grades-what-you-did-with-the-answer/</loc><lastmod>2026-09-08T17:53:18.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/why-we-need-an-ai-kill-switch/</loc><lastmod>2026-08-02T22:17:04.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/the-artifact-nobody-classified-what-happens-to-the-audio-after-your-ai-scribe-finishes/</loc><lastmod>2026-07-16T17:10:29.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/ai-agentic-systems-in-the-genomic-marketplace-a-governance-paradigm-shift/</loc><lastmod>2026-07-16T00:16:22.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/ten-ai-bills-just-cleared-a-house-committee-heres-what-actually-matters/</loc><lastmod>2026-07-15T18:20:29.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/encryption-is-still-addressable-in-2026-regulators-just-bought-it-another-year/</loc><lastmod>2026-07-10T21:54:43.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/healthcare-keeps-breaking-records-unfortunately-theyre-the-wrong-ones/</loc><lastmod>2026-07-06T20:17:48.000Z</lastmod></url><url><loc>https://blog.controllayer.ai/when-does-my-health-tech-startup-need-a-hipaa-security-risk-assessment/</loc><lastmod>2026-07-05T02:31:29.000Z</lastmod><image:image><image:loc>https://blog.controllayer.ai/content/images/2026/07/Screenshot-2026-07-04-at-7.25.56---PM.png</image:loc><image:caption>Screenshot-2026-07-04-at-7.25.56---PM.png</image:caption></image:image></url></urlset>