Tolulope (@mokithelight) header
Tolulope (@mokithelight) profile picture

Privacy and Information Security Professional | soft woman🍀

Tallinn, Estonia
Joined March 2018
Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)Photo by Tolulope (@mokithelight)
What tasks should AI be trusted with, and when should humans remain involved? Designing those decision rights is one of the defining challenges of the AI era. Researchers at the MIT Center for Information Systems Research have developed a framework to help. Learn more: bit.ly/4zed20M
9
84
7
270
11,782
Agentic IAM is still one of the most pressing problems in our industry, and NIST just published their Design Tenets for Agent Identity Management Systems. A few of the items that jumped out to me are distinct, cryptographically verifiable identities for agents that are separate from human users and service accounts, a clear chain of trust when agents act on behalf of users or organizations, least and zero standing privilege, and cryptographically signed mandate statements that define intended outcomes and constraints for agent actions. In my opinion least and zero standing privilege is going to be the most elusive, as people and organizations lean into the utility of agents in the security vs. utility tradeoff. It was hard enough for human users and in cloud, and it's going to be even harder to constrain autonomous agents that can drive business outcomes. nist.gov/blogs/cybersecurity…
14
33
2
209
12,136
Tolulope retweeted
NIST Workshop on AI Incident Management - nvlpubs.nist.gov/nistpubs/ir…
2
101
3
405
18,638
What tasks should AI be trusted with, and when should humans remain involved? Designing those decision rights is one of the defining challenges of the AI era. Researchers at the MIT Center for Information Systems Research have developed a framework to help. Learn more: bit.ly/4zed20M
12
169
14
548
21,499
Tolulope retweeted
Want to understand what privacy work actually involves? Start with one practical task that interests you. Privarly’s guided labs let you explore the work before choosing a direction. You can start for free. 1/5
🤖 Made with AI
1
2
1
15
Tolulope retweeted
Privacy work includes records, requests, assessments, policies and difficult decisions. Privarly gives you guided labs and career paths to practise the work. Explore: privarly.com/
1
12
Tolulope retweeted
Operations, analysis, programme management, legal strategy, engineering, AI governance or DPO work? Explore seven privacy career tracks and find the tasks that interest you. privarly.com/careers
1
4
Tolulope retweeted
Which privacy task would you like more practice doing: screening a project, assessing legitimate interests, writing a DPIA, reviewing a transfer, or maintaining a risk register?
1
3
Tolulope retweeted
aibcf.org/controls/ - AI Baseline Control Framework Manage & govern AI use in your organization The AI Baseline Control Framework (AI BCF) is a free, open framework of 20 AI governance controls for organizations that deploy (use) AI. Each control is mapped to the NIST AI RMF, ISO/IEC 42001 and the EU AI Act. The AI BCF helps organizations of all sizes understand what is necessary to manage & govern AI deployment.
5
8
1
62
2,887
Taking the weekend to catch up on the reading assignments from this week. If you see potential synergies between the EU AI Act and GDPR, take a look at the following decision from the Italian DPA: lnkd.in/eJ46Htj7.
3
3
262
Tolulope retweeted
Mapping NIST AI RMF + Forrester RACI → Microsoft security stack onedrive.live.com/:x:/g/pers…
1
30
156
8,989
We're thrilled to announce the next section of our Privacy Activism resources! 🎉 📑 The Data Protection Authority Directory is a new tool to help you find the main consumer privacy law in your region, and the authority mandated to enforce that law. We sincerely hope this will be a useful tool for building your knowledge about what privacy protections you're entitled to. Paired with our resource on reporting privacy violations in our Privacy Activist Toolbox, you can take a stand against violations of your privacy rights, and make a significant impact benefiting both you and your community. Find your country/state/region here: privacyguides.org/en/activis…
17
82
3,657
EU Cybersecurity Policy Directory Policies Overview of all EU cybersecurity-relevant legislation and policies in the database cyber-policy-directory.eu via RA Stephan Schmidt
2
98
1/2 E-Mail-Anbieter muss nach § 21 Abs. 2 TDDDG keine Auskunft über Bestandsdaten des Nutzers einer E-Mail-Adresse erteilen OLG München, Beschluss vom 26.08.2025, 18 W 677/25 Pre e gesetze-bayern.de/Content/Do…
1
2
193
Failure to comply with Uganda’s Data Protection and Privacy Act can result in financial penalties and reputational damage. Early compliance reduces risks and avoids costly enforcement action. Explore the Uganda Module to check your compliance: privacyguide.africa/uganda #Uganda
1
2
61
Operating across borders in Africa means your compliance obligations change from one country to the next. Nigeria, Rwanda & Uganda all set different registration requirements. Check the registration rules for all three countries here: privacyguide.africa #Dataprotection
1
1
41
In Uganda, most organisations must register with the Personal Data Protection Office including foreign entities. This is one of the first steps. It promotes transparency under the Data Protection and Privacy Act. Check if you need to register 👉 privacyguide.africa/uganda-r…
1
1
35
Uganda Assessment Module is LIVE And it's sizzling hot🔥 From the Pearl of Africa comes your FREE guide to Uganda’s Data Protection laws. If you collect/process Ugandan data, compliance starts here. No more guessing. No excuses. Access the module here: privacyguide.africa/country/…
1
1
72
Tolulope retweeted
📢 Listen to the new podcast episode from Dr Datenschutz featuring the EDPB Chair. Among topics discussed: the EDPB’s & DPAs’ roles, GDPR and AI, and what lies ahead for the GDPR. 🎧 Listen now: dr-datenschutz.de/podcast/75… #DataProtection #GDPR #ArtificialIntelligence #AI
4
2
3
769