Sujay Maheshwari

Guardian Code: Safeguarding Applications in the AI Era with Jim Manico

TLDR; * When it comes to Code generation using Gen AI tools, Trust but Verify. Always run those through your DevSecOps pipelines for Static & Dynamic Scans. * During Prompt engineering, stay away from feeding sensitive information and ask for Low Cyclomatic Complexity recommendations. It’s simpler and easier to maintain. * On

December 27, 2023

Guardians of Trust: Navigating Third-Party Risk Across Business Realms with Jeffrey Wheatman

TLDR; * Vendor Security Questionnaires are not enough because they are out of date a month after its filled. Continuous assessment is more important than one time vendor security questionnaire. * Prioritization of Vendors and their security is key to not get overwhelmed with massive number of vendors. it can be driven

December 13, 2023

Security that speaks to heart; understanding emotional intelligence and third-party risk management with Shivani Arni

TLDR; * From a culture perspective, create an environment where your Team feels comfortable in taking Risks. Without Risk Taking, there’s no Innovation. * When it comes to Security, show the ROI to the Leadership and do not forget to recognize effort and celebrate small wins. * Assign Tiers to vendors based

November 29, 2023