How to prepare security controls for future AI regulations