Guozhen AIGlobal AI field notes and model intelligence
Back to all AI decision guides

AI Topic Hub

AI Security, Governance, and Compliance

Compare AI security controls, governance frameworks, compliance automation, data privacy, vendor questionnaires, red teaming, SIEM, SOAR, XDR, CNAPP, DSPM, DLP, PAM, GRC, and risk tooling.

25 decision guidesUpdated 2026-06-11English search hub

Buyer questions

  • How do we secure AI apps, model access, prompts, data, and vendors?
  • Which governance controls matter before enterprise rollout?
  • How should security teams compare SIEM, SOAR, XDR, CNAPP, DSPM, DLP, PAM, and GRC AI features?

Evaluation angles

  • Threat model coverage and evidence quality
  • Policy enforcement, audit trails, and approval controls
  • Data residency, privacy, and vendor risk posture
  • Integration with existing SOC, IAM, cloud, and GRC workflows

Covered categories

Cybersecurity (3)AI compliance (2)AI security (2)Data security (2)Identity security (2)AI data governance (1)AI governance (1)AI governance and compliance (1)AI privacy (1)AI procurement (1)

Decision Pages

Guides in this topic hub

AI safety

LLM guardrails guide

A practical guide to LLM guardrails for prompt injection, tool approvals, output validation, human review, policy checks, and production AI risk management.

9 min readIntermediate
Read guide

RAG security

Enterprise RAG security checklist

A practical security checklist for enterprise RAG: data ingestion, permissions, prompt injection, retrieval filtering, citations, logging, privacy controls, and human review.

10 min readIntermediate to advanced
Read guide

AI governance

AI governance framework guide

Compare NIST AI RMF, ISO/IEC 42001, and the EU AI Act for enterprise AI governance, risk management, controls, documentation, procurement, and operational readiness.

10 min readIntermediate
Read guide

AI compliance

EU AI Act checklist

A practical EU AI Act checklist for product teams: risk categories, high-risk classification, transparency duties, GPAI exposure, documentation, human oversight, and monitoring.

10 min readIntermediate
Read guide

AI security

LLM red teaming guide

A practical LLM red teaming guide for prompt injection, jailbreaks, data leakage, tool misuse, RAG attacks, agent safety, adversarial testing, evals, and remediation.

10 min readIntermediate
Read guide

AI privacy

AI data residency guide

A practical AI data residency guide for API and enterprise AI buyers: regional storage, inference location, retention, zero data retention, DPAs, privacy controls, and vendor review.

9 min readIntermediate
Read guide

AI procurement

AI vendor questionnaire

A practical AI vendor security questionnaire for enterprise procurement: data use, retention, training, SOC 2, ISO, residency, access control, RAG permissions, evals, red teaming, and incident response.

10 min readBeginner to intermediate
Read guide

AI compliance

SOC 2 for AI apps

A practical SOC 2 guide for AI apps and LLM startups: trust services criteria, AI-specific controls, model changes, prompt logs, data retention, RAG permissions, evals, and vendor evidence.

10 min readIntermediate
Read guide

AI security

LLM security tools comparison

Compare LLM security tools for prompt injection, jailbreaks, data leakage, insecure tool use, guardrails, red teaming, and vulnerability scanning: Lakera Guard, Promptfoo, NVIDIA NeMo Guardrails, and Garak.

10 min readAdvanced
Read guide

AI governance and compliance

AI compliance automation tools

Compare Vanta, Drata, Secureframe, and Sprinto for SOC 2, ISO 27001, AI policy evidence, vendor questionnaires, and enterprise security reviews.

9 min readIntermediate
Read guide

Cybersecurity AI

AI SOC analyst tools

Compare AI SOC analyst and SecOps platforms for alert triage, investigation, threat hunting, response automation, SIEM/XDR integration, and analyst productivity.

11 min readAdvanced
Read guide

AI data governance

AI data governance tools

Compare AI data governance tools for data catalogs, lineage, AI use-case inventories, model governance, policy evidence, sensitive data controls, and trusted enterprise AI.

10 min readIntermediate
Read guide

Cybersecurity

AI SIEM tools comparison

Compare AI-ready SIEM tools for security analytics, log ingestion, detection engineering, SOC investigation, SOAR, UEBA, threat intelligence, and security data lakes.

10 min readAdvanced
Read guide

Cloud security

AI CNAPP tools comparison

Compare AI cloud-native application protection platforms for CSPM, CWPP, CIEM, vulnerability management, code-to-cloud security, DSPM, Kubernetes, and AI security posture.

10 min readAdvanced
Read guide

Cybersecurity

AI XDR tools comparison

Compare AI XDR tools for endpoint, identity, cloud, email, network telemetry, automated investigation, attack disruption, MDR handoff, and SOC workflow fit.

10 min readAdvanced
Read guide

Cybersecurity

AI exposure management comparison

Compare AI exposure management tools for vulnerability risk, attack paths, asset context, cloud exposure, identity risk, remediation prioritization, and executive reporting.

9 min readAdvanced
Read guide

Data security

AI DSPM tools comparison

Compare AI DSPM tools for sensitive data discovery, cloud data risk, access governance, AI data exposure, DLP workflows, classification, and remediation.

10 min readAdvanced
Read guide

Identity security

AI identity governance comparison

Compare AI identity governance tools for access reviews, lifecycle management, privileged access, compliance evidence, identity risk, joiner-mover-leaver workflows, and SaaS access.

10 min readAdvanced
Read guide

Risk management

AI TPRM software comparison

Compare AI third-party risk management software for vendor onboarding, questionnaires, cyber ratings, continuous monitoring, remediation, fourth-party risk, and executive reporting.

9 min readAdvanced
Read guide

Data security

AI DLP tools comparison

Compare AI DLP tools for Microsoft 365, SaaS, browser, endpoint, email, cloud, GenAI apps, policy enforcement, incident triage, and data security workflows.

9 min readAdvanced
Read guide

Identity security

AI PAM tools comparison

Compare AI privileged access management tools for vaulting, session monitoring, just-in-time access, identity risk, machine identities, AI agents, and audit evidence.

9 min readAdvanced
Read guide

Security operations

AI SOAR tools comparison

Compare AI-ready SOAR and security automation tools for SOC playbooks, alert triage, case management, integrations, human approvals, and response governance.

12 min readAdvanced
Read guide

Email security

AI email security comparison

Compare AI email security tools for phishing, BEC, impersonation, account takeover, malware, collaboration security, Microsoft 365 protection, and SOC workflow fit.

12 min readIntermediate
Read guide

GRC

AI GRC software comparison

Compare AI GRC software for audit, risk, compliance, control testing, regulatory evidence, board reporting, remediation workflows, and enterprise governance.

12 min readAdvanced
Read guide

Tax compliance

AI tax compliance comparison

Compare AI tax compliance software for indirect tax, e-invoicing, global reporting, tax determination, filings, trade classification, audit readiness, and ERP integration.

12 min readAdvanced
Read guide

Related topic hubs