An IRAP Report Travels. The Risk Decision Does Not.
An IRAP assessment is evidence for a security decision, not a certification. Why scope, deployment and the consuming agency's own risk decision matter when you reuse assessment results.
The AppGenie Blog
Controlled AI-assisted delivery, DevSecOps and compliance engineering, written from inside environments where somebody eventually has to answer for the outcome. 3 posts and counting.
All (3)
DevSecOps (12)
AI Technology (11)
Copado (9)
FTP2SF (9)
Salesforce (9)
AI (8)
Compliance (5)
Engineering Governance (3)
Growth (3)
Infrastructure (3)
Release Management (3)
Security (3)
showing the 12 most-used of 76 topics
AI, Salesforce and the Crown Jewels Problem
AI is already helping attackers recon your stack, spear phish your admins and walk data out the front door. This piece explains why Salesforce is a soft target, why identity and duty separation are non negotiable and what to change in the next 90 days.
Confused about FedRAMP and IRAP
We take a look at what FedRAMP and IRAP mean, how they are similar and more importantly why they are different, and what this means to you.