We use cookies to personalize content and to analyze our traffic. Please decide if you are willing to accept cookies from our website.
Advanced Settings
Become A Client!

Articles by Tag: Risk Management

Threat-Modelling User-to-User Harm in Applications
Featured

Threat-Modelling User-to-User Harm in Applications

A technically secure application can still be unsafe for the people using it. CIOs responsible for applications with meaningful user interaction should require a User-Harm Threat Model before launch and whenever interaction functionality materially changes.
Your Threat Model Is Already Out of Date
Tech Sketch

Your Threat Model Is Already Out of Date

Traditional threat modeling breaks in SMEs because it assumes stable architecture, clear ownership, and spare security capacity. AI can reduce the cost of system understanding and first-pass analysis, but it cannot replace ownership, risk judgment, or governance.
How SMEs Can Navigate the AI Tech Surge Using Tech Radars
Tech Sketch

How SMEs Can Navigate the AI Tech Surge Using Tech Radars

AI tools are flooding the market due to the current AI boom. It becomes harder for SMEs to discover suitable tools for their needs in this crowded marketplace of tools. A well-structured AI technology radar can help provide direction and reduce adoption risks. This allows CIOs and SMEs to save resources, reduce budgets, and embrace AI tools that provide the best ROI.
Mitigate AI Risk with the OWASP AI Testing Guide
Tech Sketch

Mitigate AI Risk with the OWASP AI Testing Guide

As AI systems scale into production, traditional validation practices may fall short. The OWASP AI Testing Guide (AITG) provides a structured framework for testing AI-specific risks, from adversarial threats to infrastructure vulnerabilities. CISOs should review OWASP’s AI Testing Guide to help ensure secure and responsible AI deployment.
Unraveling the Local Loop: A Guide to Safer Locally Deployed AI
Tech Sketch

Unraveling the Local Loop: A Guide to Safer Locally Deployed AI

Organizations are increasingly adopting large language models (LLMs) to enhance operations and decision-making. While deploying these models locally offers significant advantages in terms of data sovereignty and control, it also presents unique security challenges that cannot be overlooked. IT executives who have, or are planning, a local LLM deployment should make sure it is implemented securely, ethically, and effectively to avoid data breaches and operational risks.
SEC's New Cybersecurity Disclosure Rule: A Game Changer Now in Effect
Tech Sketch

SEC's New Cybersecurity Disclosure Rule: A Game Changer Now in Effect

The new SEC Cybersecurity Disclosure Rules have taken effect and seek to mandate public companies, including foreign private issuers, to provide more detailed and uniform disclosures about cybersecurity. C-level IT executives need to understand these updated regulations and adjust their compliance plans accordingly to meet the new standards.