Cybersecurity
LABUSA cybersecurity insights: threat protection, compliance, and managed security strategies to safeguard government and enterprise systems.
Drupal Cloud Security Architecture
Organizations moving off a managed Drupal platform frequently discover, during the first audit after the move, that the platform's controls were the controls. The web application firewall, the transport security, some ac...
What Is Private Enterprise AI?
Private enterprise AI is an approach to using artificial intelligence in which an organization keeps control of the things that make AI risky: the data that goes into it, the identities allowed to use it, the systems it ...
Secure RAG Architecture
A retrieval system is a search engine that answers in sentences, and that changes its security properties in one specific way: search returns links a user can be denied, while generation returns prose that has already be...
Secure Generative AI for Business
Generative AI arrives in an organization whether or not anyone approves it. By the time the question reaches a security team, the useful version of it is rarely whether to allow it, but how to make the allowed path bette...
Protecting Sensitive Data When Using AI
An AI system is a new set of paths in and out of your information. Most of the work of protecting data around one is not novel: it is knowing which paths exist and putting a control on each. What is novel is that several...
AI Identity and Access Management
The governing principle is one sentence, and almost every failure in this area is a departure from it. An AI system must not become a way around the authorization model an organization already has.
That sounds obvious. ...
Securing Enterprise AI APIs
An AI environment is a set of APIs. The model is reached over one, the retrieval service exposes another, the connectors consume half a dozen more, and anything the system can act on is reached the same way.
Which means...
AI Logging, Monitoring and Auditing
Every argument for logging an AI system is an argument for collecting the most sensitive material in the organization into one searchable place. Both halves of that sentence are true, and a design that takes only the fir...
Securing AI Agents in the Enterprise
An agent is an AI system permitted to act rather than only to answer. It can send the mail, update the record, open the ticket, move the file. Everything else about it is a variation on that one change, and that one chan...
AI Governance Framework for Organizations
A governance framework is a list of the things a program has to cover, so that gaps are visible rather than discovered. This one has fourteen domains. Few organizations start with all of them, and the order they are buil...