#incident-response

Strong defense needs three things: structured logs, ATT&CK-mapped detection rules and rehearsed IR runbooks. This article summarises how to build a detection-as-code program and blameless post-mortems for DevSecOps teams.

Duy TranMay 8, 202610 min

AI features have a completely different risk profile from regular features: model drift, data poisoning, hallucination cascades, and bias amplification. BAs need a proper Risk Register, an incident response plan, and a post-mortem template specifically designed for AI incidents.

Duy TranMay 5, 202613 min