Al Chen

Al Chen explains how his team turns vulnerability remediation, disaster recovery and sensitive-data handling into work that bank security teams can inspect.

• CVE remediation needs an account of image versions, bank policies and upstream dependencies; a package-version change can be supplemented with an exploit test.
  3:19 ↗
• Backup and restore logs show job status; row counts and replica convergence help assess the data itself. Cross-region recovery also requires a decision about where records may reside.
  8:29 ↗
• A judge’s reasoning can expose sensitive data even when the UI is redacted. Separating scores from explanations and using a second judge on redacted input adds protection at the cost of another model call.
  10:37 ↗
• Deployment speed depends on the bank’s readiness for image approvals, GPUs, security review and access configuration as well as the vendor’s engineering.
  13:06 ↗