Defending Dev
INDEX / TAGS / CISO 6 ENTRIES
01 — THE ARGUMENT

Everything tagged “ciso”.

Posts, tutorials, reviews and videos tagged ciso, newest first.

02 — ALL ENTRIES, NEWEST FIRST
Nobody is accountable for code that nobody wrote Coding agents commit under developer credentials, so the log names someone who never saw the change. Decide whose name goes on the risk register before you decide what an agent may merge. BLOG · LEADERSHIP · 24 SEP · 5 MIN The junior developer who never sleeps Review everything, mentor the prompts, never let it merge alone. BLOG · DEVELOPER · 30 JUN · 2 MIN Reviewed: three SAST tools vs. assistant-written repos We ran three leading static analysers over a corpus of assistant-generated services. The results argue for retuning, not replacing. REVIEW · SECURITY · 23 JUN · 1 MIN AI slop is a supply-chain problem, not a quality problem Generated code enters your estate like a dependency — treat it with the same provenance discipline. BLOG · SECURITY · 20 JUN · 1 MIN A one-page AI coding policy your board will sign Scope, accountability, audit trail — on one page. Template included; adapt it this week. BLOG · LEADERSHIP · 16 JUN · 1 MIN Metrics that survive a board meeting Four numbers to report quarterly, and the vanity metrics to retire. BLOG · LEADERSHIP · 9 JUN · 1 MIN