VP of Eng / CISO @TrustCloudAI. Formerly VP of Platform @kinvey. Cloud, Security/Compliance, AI/ML, CI/CD, Music, Space, Exp, all things tech. Opinions mine.
Boom! ๐ฅ @kintent launches free, self-service #SOC2 prep for startups. This is game changing as we work to change how companies think of #security, #compliance, and #trust. So proud of the entire Kintent team for making this happen! https://t.co/iB1ycHUNJ4
@SiGallagher@jeremybp@sama You're forgetting one important factor of how our economy works - companies need people to buy their stuff. If everyone is out of a job, then no one will be able to afford most of the things companies make.
At @TrustCloudAI , #AI has been part of our DNA since our founding. Early on we learned that understanding how #LLMs actually work was critical for mastering #PromptEngineering, leading to far better, more consistent AI outcomes.
https://t.co/xUnp8o7Qe5
@duolingo We've been kicked out of our family plan - only my wife who set up the plan still has access. She tried to reinvite us but it says the invitation is no longer valid.
@DrMattBob@RossKneeDeep The research does not back this up. Productivity is generally better in WFH/Hybrid environments. Your assertion is not backed by the data.
@rakyll My experience is the opposite - larger companies can often let a lot of stuff slip into the codebase that would never pass scrutiny at any startup I've worked at.
@marcorus @howdataworks Hybrid and remote work is actually on the rise. Other big tech may follow suit but startups and newer tech companies will use remote and hybrid work as a tool to attract talent.
@disneyglimpses Problem is that would still be too many people on G+. But maybe tier it - $10 for deluxe (or free), $15 for moderate, $20 for value, and $49 for everyone else.
@jezhumble@ealexhudson@4wmturner@mipsytipsy My company https://t.co/FGFiNyUWx4 has a common control framework that is approachable and takes a DevOps / CICD viewpoint. It's really not hard to implement ISO 27001:2022 or SOC2 with using DevOps principles.
Great๐งตon the perceived tension between compliance and modern CI/CD best practices. tl; dr; the tension is artificial - CI/CD is not only compatible, but more fully achieved the intention behind various compliance frameworks.
I just got back from @fintechdevcon in Austin. It was a super fun trip (notwithstanding the 105 degree air ๐ฅต).
I gave a new talk while I was there, on why compliance and regulatory standards are โจnotโจ incompatible with modern development best practices.
@mipsytipsy I am VP of Eng for a company focused on a product to (among other things) help with compliance. This is exactly right and what we do internally as well as help other companies achieve through our product. Compliance and CICD are not incompatible.