216 Matching Annotations
  1. May 2026
    1. Traditional compliance was designed around human actors. We now need a modern AI approach for verifying identity, assessing intent, and establishing liability when the counterparty is an autonomous agent

      大多数人认为合规原则和框架具有普遍适用性,但作者认为针对人类设计的合规系统无法应对AI代理带来的新挑战。这一观点挑战了合规工作的基础假设,暗示需要根本性重构合规方法以适应自主代理。

    2. More people, it turns out, has not meant better outcomes. For instance in 2024, TD Bank was slapped with a $3 billion fine for failing to monitor 92% of its transactions

      大多数人认为增加合规人员数量可以提高合规效果和降低风险,但作者认为单纯增加人力并不能带来更好的合规结果。这一反直觉观点指出,传统的人力密集型合规方法已经失效,暗示需要技术解决方案而非更多人力。

    3. Over the last 20 years the fastest-growing occupation in the US was manicurists and pedicurists. But following close behind? Compliance Officers.

      大多数人认为合规是企业的负担和成本中心,但作者认为合规已成为美国增长最快的职业之一,暗示合规已成为经济中不可或缺的重要组成部分。这一观点挑战了人们对合规工作价值的传统认知,表明合规不仅必要而且正在扩张。

    4. Compliance is moving beyond just a cost center, to a revenue driver.

      大多数人认为合规纯粹是企业成本中心,主要目的是避免罚款和处罚。但作者认为合规正在从成本中心转变为收入驱动因素。这挑战了合规的传统定位,暗示现代合规可以通过提高效率、减少误报和加速客户入职等方式直接创造商业价值。

    5. if we assume that agents will soon become the predominant purchasers on the web, this opens an entirely new category of risk.

      大多数人认为合规风险主要来自人类行为者和交易对手。但作者认为随着AI代理成为网络上的主要购买者,将出现全新的风险类别。这挑战了传统合规框架的基本假设,暗示未来合规需要考虑非人类行为者的独特风险特征。

    6. Regulation stops being a document that people interpret and becomes code that systems execute.

      大多数人认为合规主要是人类专家解读和执行法规的过程。但作者认为法规将从人类解释的文档转变为系统执行的代码。这挑战了合规工作的本质认知,暗示AI将彻底改变合规领域的基本工作方式,从人类主导转向系统主导。

    7. Over the last 20 years the fastest-growing occupation in the US was manicurists and pedicurists. But following close behind? Compliance Officers.

      大多数人认为合规工作是枯燥且增长缓慢的辅助职能,但作者认为合规已成为美国增长最快的职业之一,仅次于美甲师。这挑战了人们对合规工作价值的传统认知,暗示合规职能在当代经济中扮演着比想象中重要得多的角色。

  2. Apr 2026
    1. The compliance-driven buyers improvising local AI out of retail Mac Minis because the product they need does not exist.

      大多数人认为企业AI采用需要专门的解决方案和供应商,但作者指出一些合规驱动的买家正在使用零售版Mac Mini自行构建本地AI解决方案。这挑战了企业AI市场的传统认知,暗示市场可能存在未被满足的需求,以及企业正在以非传统方式应对AI挑战。

    1. It maintains 97% skill compliance across 40 complex skills on MM Claw, each skill exceeding 2,000 tokens.

      97%的技能合规率是一个非常高的指标,特别是在处理超过2000个token的复杂技能时。这表明M2.7不仅能够理解复杂指令,还能在长时间任务中保持一致性和可靠性。对于需要构建复杂代理工作流的开发者来说,这一数据点特别有价值,因为它意味着模型可以可靠地执行多步骤、高复杂度的任务。

    1. During beta, ChatGPT for Excel is available globally for ChatGPT Business, Enterprise, Edu, Teachers, and K-12 users, and for ChatGPT Pro and Plus users outside the EU.

      令人惊讶的是:欧盟地区的ChatGPT Pro和Plus用户无法使用Excel功能,这可能是由于欧盟更严格的数据保护法规所致。这种地域限制反映了不同地区数据隐私法规对AI功能实施的显著影响。

    1. Gemma 4 models undergo the same rigorous infrastructure security protocols as our proprietary models.

      「与专有模型相同的安全协议」——这句话针对的是企业和主权机构客户,暗示 Google 正在用开源模型打「安全牌」吸引政府和监管严格行业。对于不愿依赖 OpenAI/Anthropic 闭源 API 的企业,E2B/E4B 提供了一条「可审计、可部署、可监管」的路径,而 Google DeepMind 的安全背书是这条路的核心说服力。

  3. Jan 2026
    1. Most standards work in this space focuses on compliance artifacts: SBOMs for the Cyber Resilience Act, attestations for procurement requirements. Less attention goes to the underlying tools developers actually use. The dependency graph that feeds the SBOM generator, the metadata lookup that powers vulnerability scanning, the notification when a new version ships.

      Says standards in this topic are aimed at compliance. SBOMs for the Cyber Resilience Act e.g. [[Cyber Resilience Act CRA EU 20231026123507]]

  4. Dec 2025
    1. The irony both sides miss: this conflict could entrench the very platforms Trump claims to defend and Europe claims to regulate. Compliance burden becomes incumbent moat.

      Not following. By def the strictest stuff applies to the largest platforms, so no moat. n:: The compliance burden is progressive, like taxes are /should be.

  5. May 2024
    1. Identify, prioritize, and resolve dependency risk Once dependencies are identified, Black Duck Security Advisories enable teams to evaluate them for associated risk, and guides prioritization and remediation efforts. Is it secure? Receive alerts for existing and newly discovered vulnerabilities, along with enhanced security data to evaluate exposure and plan remediation efforts. Is it trustworthy? Perform a post-build analysis on artifacts to detect the presence of malware, such as known malicious packages or suspicious files and file structures, as well as digital signatures, security mitigations, and sensitive information. Is it compliant? For every component identified, Black Duck SCA provides insights into license obligations and attribution requirements to reduce risk to intellectual property. Is it high quality? Black Duck SCA provides metrics that teams use to evaluate the health, history, community support, and reputation of a project, so that they can be proactive in their risk mitigation process.
  6. Sep 2023
    1. To build HIPAA compliant software, developers need to be aware of and comply with several key requirements outlined in the HIPAA Privacy Rule and Security Rule. These requirements are designed to ensure the confidentiality, integrity, and availability of protected health information (PHI) and to prevent unauthorized access, use, or disclosure of PHI.

      Building software compliant with HIPAA standards necessitates a deep understanding of its Privacy and Security Rules to safeguard protected health information effectively.

  7. May 2023
  8. Dec 2022
    1. For compliance reasons, you will not be able to see contacts who submit spam complaints in your exclusion list.  We do not offer the ability to export a list of spam complaints from FBLs at the moment. This is also for compliance. 

      "For compliance reasons". That's pretty vague. Compliance with what?

    1. Information is blocked from going outside the organization when data is not supposed to leave the tenant boundary for compliance purposes (for example, in U.S. Government organizations: Microsoft 365 GCC, GCC High, and DoD). Reporting a message or file to Microsoft from one of these organizations will have the following message in the result details: Further investigation needed. Your tenant does not allow data to leave the environment, so we could not find anything with an initial scan. You'll need to contact Microsoft support to have this item reviewed.

      seemingly contradictory:

      You'll need to contact Microsoft support to have this item reviewed. But they already tried to report it to Microsoft and it was blocked? What form of contacting Microsoft support is expected to be used and how is it better? Won't any form of "having this item reviewed" cause it to leave the boundary and go outside the organization?

  9. Aug 2022
  10. Apr 2022
  11. Mar 2022
  12. Feb 2022
  13. Jan 2022
    1. ReconfigBehSci. (2022, January 9). Just a thought on this and the general vaccine mandate debate. As a behavioural scientist currently stuck in Germany where this is a live debate, it strikes me that the thoughts below address only part of the population: Those not currently vaccinated. But what about ... 1/2 [Tweet]. @SciBeh. https://twitter.com/SciBeh/status/1480213148032450565

  14. Dec 2021
    1. Efforts to clarify and disseminatethe differences between “privacy as advocacy” (e.g.,privacy is a fundamental right; privacy is an ethicalnorm) and “privacy as compliance” (e.g., ensuringprivacy policies and laws are followed; privacyprograms train, monitor, and measure adherence torules) help frame conversations and set expectations.

      This is an interesting distinction... privacy-because-it-is-the-right-thing-to-do versus privacy-because-you-must. I think the latter is where most institutions are today. It will take a lot more education to get institutions to the former.

  15. Nov 2021
    1. Is Agile/SCRUM Modern Slavery? https://en.itpedia.nl/2021/11/30/is-agile-scrum-moderne-slavernij/ What do you say Modern Slavery? Yes, when I first read the Agile Manifesto, I felt an unease. Especially when I also read the 12 accompanying principles. I realize that I am making extreme statements in this article, but they are intended as a mirror and to reflect for ourselves what we are actually doing.

  16. Oct 2021
  17. Sep 2021
    1. 2015, c. 36, s. 172

      Economic Action Plan 2015 Act, No. 1, SC 2015, c 36, https://canlii.ca/t/52m2b, s. 172, amends IRPA s. 32(d.5) to say:

      (d.5) the requirement for an employer to provide a prescribed person with prescribed information in relation to a foreign national’s authorization to work in Canada for the employer;

      Previously it had said:

      (d.5) the requirement for an employer to provide a prescribed person with prescribed information in relation to a foreign national’s authorization to work in Canada for the employer, the electronic system by which that information must be provided, the circumstances in which that information may be provided by other means and those other means;

  18. May 2021
  19. Apr 2021
  20. Mar 2021
  21. Feb 2021
  22. Jan 2021
  23. Dec 2020
  24. Nov 2020
  25. Oct 2020
  26. Sep 2020
    1. Leuker, C., Hertwig, R., Gumenik, K., Eggeling, L. M., Hechtlinger, S., Kozyreva, A., Samaan, L., & Fleischhut, N. (2020). Wie informiert sich die Bevölkerung in Deutschland rund um das Coronavirus? Umfrage zu vorherrschenden Themen und Gründen, dem Umgang mit Fehlinformationen, sowie der Risikowahrnehmung und dem Wissen der Bevölkerung rund um das Coronavirus (Version 5, p. 966670) [Application/pdf]. Max-Planck-Institut für Bildungsforschung. https://doi.org/10.17617/2.3247925

  27. Aug 2020
  28. Jul 2020
    1. Jeffrey, B., Walters, C. E., Ainslie, K. E. C., Eales, O., Ciavarella, C., Bhatia, S., Hayes, S., Baguelin, M., Boonyasiri, A., Brazeau, N. F., Cuomo-Dannenburg, G., FitzJohn, R. G., Gaythorpe, K., Green, W., Imai, N., Mellan, T. A., Mishra, S., Nouvellet, P., Unwin, H. J. T., … Riley, S. (2020). Anonymised and aggregated crowd level mobility data from mobile phones suggests that initial compliance with COVID-19 social distancing interventions was high and geographically consistent across the UK. Wellcome Open Research, 5, 170. https://doi.org/10.12688/wellcomeopenres.15997.1

  29. Jun 2020
  30. May 2020
  31. Apr 2020