Intro I was listening a podcast about AI and cybersecurity and the host was asking his guest about this question: Is AI going to wipe out humanity? While…
Category: Sorin Mustaca – Security & Technology
Is AI going to wipe out humanity?
Intro I was listening a podcast about AI and cybersecurity and the host was asking his guest about this question: Is AI going to wipe out humanity? While…
Cyber Resilience Act Single Reporting Platform (CRA-SRP) obligations for software companies selling globally
I wrote here about the CRA and the deployment plan: https://www.sorinmustaca.com/eu-cyber-resilience-act-cra-overview/ We are past September 11th and the…
AI Q&A: what is an Agent?
Intro I talk a lot about AI these days… and I know I am not alone. People talk a lot about “agentic AI” or “AI Agents” or simply “Agents”. During these…
Introduction to the Secure SDLC in the AI-Native world: the reality check
Introduction This is the very first article from a series of articles that will be merged with the existing SDLC Process “From Idea to Proof of Concept to…
ISA VDA 6.0.3 – The Data Protection sheet explained
The Data Protection catalog is the shortest of the three in ISA 6.0.3 and the one most often underestimated. Twelve control questions across eight…
Why SSDLC is helping shipping faster and more secure code
Software Delivered the Same Way Every Time Before security enters the picture, SDLC exists to solve a simpler problem: making software delivery repeatable. A team that builds features ad hoc, without a defined sequence of requirements, design, coding, testing, and…
Security User Stories How-To – for product managers and developers
I wrote some time ago about “How to create security user stories” and I received in the meanwhile a lot of good feedback and questions about it. For these reasons, I decided that it is time to write again on…
ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance
This is the part 5 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 5) — Information Security Sheet: Supplier Relationships, Compliance Chapter…
ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security
This is the part 4 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 4) — Information Security Sheet: IT Security / Cyber Security Chapter…
ISA VDA 6.0.3 (part 3) — Information Security Sheet: Human Resources, Physical Security, Identity and Access Management
This is the part 3 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 3) — Information Security Sheet: Human Resources, Physical Security, Identity…
ISA VDA 6.0.3 (part 2) — Information Security Sheet: IS Policies and Organization
This is the part 2 of the series about the TISAX label: TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1). ISA VDA 6.0.3 (part 2) — Information Security Sheet: IS Policies and Organization …
TISAX getting started: A Deep Dive into the ISA Assessment Workbook (part 1)
TISAX — the Trusted Information Security Assessment Exchange — or Trusted ISA Exchange – is the automotive industry’s answer to a decades-old problem: every OEM was running its own supplier security questionnaire, and tier-1 and tier-2 suppliers were drowning…