Tag: compliance
-
Talk: VCF + Tanzu Platform = The Private Cloud Enterprises Actually Needs – June 25th, 2026
I’m doing a Global VMUG session with Oren Penso this Thursday, June 25th, 5:40pm CEST. Virtual, free. Title: “VCF + Tanzu Platform = The Private Cloud Enterprises Actually Needs.” The abstract: VMware Cloud Foundation 9 brings modern infrastructure to your private cloud. Tanzu Platform layers on as the application platform layer – giving developers PaaS…
-
Headless AI, Evals as Levers, and Spaghetti Topped With Spaghetti – Related to your interests, Monday
Also: Cloudflare’s wholesale memory, custom Claude Code, and Google Cloud math From The Edge Not Taken. Related to your interests Headless everything for personal AI – What if we go back and o the command line? // DOS was good enough for our grandparents, it’s good enough for us. The Harness Is the Lever: Why…
-
As we continue to accelerate the pace of digital innovation across our global operations in an uncertain world, maintaining control over data locality and security is paramount,” said Daniele Tonella, Chief Technology Officer, ING. “VMware Cloud Foundation 9 will provide us with the unified, enterprise-grade private cloud platform necessary to achieve multi-region consistency, enhance workload…
-
🤖 DoD Unveils CSRMC: Automating Continuous Compliance for Cyber Risk at Operational Speed
Summarized by AI. The article explores how defense and enterprise organizations are evolving from traditional, static compliance frameworks toward continuous, automated, and intelligence-driven security models. It traces the U.S. Department of Defense’s (DoD) cybersecurity governance evolution–from DITSCAP in 1997 to the newly announced Cyber Security Risk Management Construct (CSRMC) in 2025–and argues that this shift…
-
Cloud sovereignty strategy advice
”Prioritize sovereignty where it matters most. Not every workload requires sovereign infrastructure — and overengineering can be costly and inefficient. Focus on areas where sovereignty is critical: AI workloads, sensitive data, and operations in regulated industries. Use edge computing to process data locally and reduce compliance risks. Localized cloud options, including sovereign clouds and regional…
-
Tactical work in the age of layoffs – Once the company drops all the work/life balance stuff in favor of work harder or get fired, shift to mild malicious compliance. // “If your company is putting pressure on you to ship more, one solution is to spend less time on testing/refactoring/glue work.”
-
Sensitive Information Disclosure in LLMs: Privacy and Compliance in Generative AI – Sensitive information in, sensitive information out. Also, make sure to have access control to your models.
-
Continuous Authorization to Operate (cATO) needs a DevSecOps platform – This is written in US Federal government speak, but the same benefits apply to commercial enterprises. If you use a centralized PaaS for your apps instead of customized infrastructure per each app, you can certify the layers below the application as compliant to use. Then…
-
Accountability Sinks – ’“accountability sink”: a situation in which a human system delegates decision-making to a rule book rather than an identifiable individual. If something goes wrong, no one is held to account.’ That’s a good phrase to point out something people seem blind to. Humans set policies, humans can decide to un-set policies. It’s…
-
A few thoughts on the Apple DOJ antitrust case, from someone who isn’t riding his first rodeo – “In organisations that are under antitrust pressure, ideas that might get put forward are held back, because people would rather not spend the time having them checked through legal and compliance teams. Acquisitions which a company might…
-
3 Multi-cloud Motivations
This is an excerpt from my upcoming blog series analyzing our 2023 State of Kubernetes survey. Multi-cloud for flexibility, sovereign cloud, and because it’s just there This year, our survey found several motivators for doing multi-cloud. Let’s look at some of them plus some that I hear about a lot that aren’t in the chart.…
-
Link: Bulls**t Jobs (Part 1 of ∞)
“It’s too soon to have a good sample size. But it seems to usually work. I think it works because there is nobody at Mr. Smith’s workplace – maybe nobody in the entire world – who cares whether Mr. Smith brings a chair into work. Somebody wrote up a procedure for employees using special chairs,…
-
Coté’s Commonplace Book – Issue #35
20 July 2018 We move to Amsterdam in 11 days. Cloud Native Journey, 3rd edition In my capacity as an enterprise thought lord, I write up how large organizations are managing to improve their software every few years. It’s the main thing I talk with people about and “work on.” I’ve been working on a…
-
Link: CI/CD is possible
“By deploying applications to cloud.gov, agencies can take care of 269 of the 325 controls required by a moderate-impact system, significantly reducing the compliance burden and the time it takes to receive an ATO.” Original source: CI/CD is possible
-
Link: GDPR requests to take thousands of hours a month, says survey
“Large enterprises expect to get an average 246 GDPR enquiries per month, for which they will need to search 43 databases (seven minutes per search). They will spend more than 1,259 hours on this, which equates to nearly 60 hours of searches per working day or 7.5 employees dedicated solely to GDPR enquiries.” It’s a…
-
Link: GDPR compliance – here are the 14 things you actually need to do
Exciting new audit needs ahead, hoss: “Organisations should review their IT systems and procedures to check they comply with GDPR requirements for privacy by design, ensuring only the minimum amount of personal data necessary is processed. Privacy Impact Assessments (PIAs) should be completed when using new technologies and the data processing is likely to result…
You must be logged in to post a comment.