Deep thinking via a shallow brain into the implications of the exploding use of AI as it pertains to compliance and security teams, who are faced with DORA, ISO 27001, ISO 42001, The EU AI Act, GDPR, NIS 2 and other regulations, having to balance MITRE ATT&CK and ATLAS, The OWASP Top 10 for the web and LLMs, factoring in risk analysis for AI specifically and AI's impact on traditional systems and processes, and the FOMO that is seeing the unchecked adoption of AI into every facet of every business while everyone attempts to ride the wave.
This blog aims to delve into these concerns and investigate them in some detail, while trying to remain light-hearted. Expletives may be used. I pinky promise that this blog hasn't been created just to ride the AI hype either.
Recent Posts