3 items
SecurityEngineers do not need to memorise every control, but they need to know how to map controls to the pipeline and generate evidence automatically. This is a short guide to four common frameworks and compliance-as-code in DevSecOps.
Duy Tran11 min
AIBAs do not need to be a security engineer, but must know how to write requirements about authentication, authorization, audit log, data masking, consent, retention, PII/PHI/PCI and compliance to avoid missing the spec.
Duy Tran12 min
AIData Governance isn't just "keeping data safe." For AI features, BA must set up data lineage (trace data from source), retention policy (how long to keep), PII classification (what's sensitive), and provenance tracking (who uses data, when). Step-by-step guide from policy to implementation checklist.
Duy Tran10 minNo results found