We Make Sure

The episode provides a practical guide to conducting a risk assessment, emphasizing simplicity and practicality. It outlines five key steps: defining scope, identifying risks, assessing likelihood and impact, planning response, and documenting the assessment. Takeaways Simplicity in risk assessment Regular review of risk assessment Chapters 00:00 The Truth About Risk Assessment

Agentic AI is a compliance problem that most businesses aren't ready for. It requires governance, human checkpoints, audit logging, and updated AI policies to address the liability and accountability issues. Businesses need to define the scope and permissions, build human checkpoints, require audit logging, and update AI policies to address the challenges of agentic AI. Takeaways Agentic AI requir...

Compliance as Code vs Real Compliance | HIPAA, ISO 27001, and NIST 800-53 Explained Everyone is talking about Compliance as Code—automating controls, enforcing policies in CI/CD, and letting tools monitor security posture in real time. But can automation really handle the full scope of compliance frameworks like HIPAA, ISO 27001, and NIST 800-53? In this episode of the We Make Sure Podcast, David...