~/talk

Cybersecurity meets Generative AI: Automating Your Compliance...

Talkat BSidesSF 2024 · 2024-05-04..05-05· [ai-assisted-development, security]
links:none on file
slides:none on file

Claim: LLMs can bootstrap compliance ops to cut cost and time by automating mapping, evidence retrieval and draft remediation but require human review. Prototype builds an RAG application and an agentic AI architecture that uses embeddings in a vector DB, zero‑shot prompts and LangChain + gp4 with in‑memory storage; it flags controls as fully/partially/not met and explains why. Current metrics: evidence automation ~20–25%, SOC 2 ~147 controls, HIPAA ~125 total, PCI ~367, end‑to‑end audits still ~2–3 months; prototype works but is early and not production‑ready.

AI-written summary · about

  1. 0:00Introduction and context
  2. 2:04The state of modern audits
  3. 6:27Red pill vs. blue pill
  4. 21:35Agentic AI architecture
  5. 25:16Practical demo and application
  6. 27:57Implementation challenges
  7. 29:32Future steps and Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.