The AI Risk Gap Is a Release Gap
Originally published on the Dromeas blog. Gartner's latest quarterly has a line I keep coming back to: to protect the value you get from AI, plan to spend at least twice as much on derisking it as you
Search for a command to run...
Articles tagged with #devops
Originally published on the Dromeas blog. Gartner's latest quarterly has a line I keep coming back to: to protect the value you get from AI, plan to spend at least twice as much on derisking it as you
Originally published on the Dromeas blog. In short: DORA doesn't care who wrote a change, human or AI. It wants proof that every ICT change was assessed, tested and approved, and that vulnerabilities
Originally published on the Dromeas blog. In short: classic SAST matches known-bad patterns, fast and repeatably. AI SAST adds reasoning about data flow and intent across files, which catches behavior
Originally published on the Dromeas blog. In short: ISO 42001 is a voluntary, certifiable standard for managing AI systems. For engineering teams it's mostly about evidence: showing how AI-assisted ch
Your AI code governance policy probably covers the tools you approved. It says nothing about the ones your developers are actually using. That gap has a name now, shadow AI, and in 2026 it's stopped b