The AI Risk Gap Is a Release Gap
Originally published on the Dromeas blog. Gartner's latest quarterly has a line I keep coming back to: to protect the value you get from AI, plan to spend at least twice as much on derisking it as you
Search for a command to run...
Articles tagged with #ai
Originally published on the Dromeas blog. Gartner's latest quarterly has a line I keep coming back to: to protect the value you get from AI, plan to spend at least twice as much on derisking it as you
Originally published on the Dromeas blog. In short: DORA doesn't care who wrote a change, human or AI. It wants proof that every ICT change was assessed, tested and approved, and that vulnerabilities
Originally published on the Dromeas blog. In short: NIST's SSDF (SP 800-218) still holds up on outcomes, but it assumes people write and review the code. With AI at 42% of committed code, the gaps are
Originally published on the Dromeas blog. In short: classic SAST matches known-bad patterns, fast and repeatably. AI SAST adds reasoning about data flow and intent across files, which catches behavior
Originally published on the Dromeas blog. In short: ISO 42001 is a voluntary, certifiable standard for managing AI systems. For engineering teams it's mostly about evidence: showing how AI-assisted ch
Originally published on the Dromeas blog. The pull request looks clean, the linter's green, the tests pass — and the code still does the wrong thing the moment someone hands it an input nobody thought