BestHub
Sign in
Tagged articles

risk management

429 articles · Page 3 of 5
Alibaba Cloud Developer
Alibaba Cloud Developer
May 17, 2024 · Backend Development

How Quantitative Code Simplification Boosted Our Backend System Efficiency

This article explains how a data‑driven approach to code reduction—measuring function usage, weighting functions, and prioritizing deletions—enabled a large‑scale backend coupon system to cut code‑review effort by up to 40%, improve readability, and manage the high risks of refactoring.

Backend RefactoringCode Simplificationfunction weighting
0 likes · 11 min read
How Quantitative Code Simplification Boosted Our Backend System Efficiency
ITPUB
ITPUB
May 10, 2024 · Databases

Choosing Low‑Risk Strategies for Critical DBA Outages

When a major operations incident strikes, the safest approach is to prioritize simple, low‑risk actions and accept limited responsibility, as illustrated by real DBA lessons from Oracle RAC failures and a data‑center power‑loss disaster.

DBADatabaseIncident Management
0 likes · 7 min read
Choosing Low‑Risk Strategies for Critical DBA Outages
DataFunTalk
DataFunTalk
May 8, 2024 · Big Data

Risk Control and Data Application in the Bulk Commodity Industry: Challenges, Solutions, and Core Capabilities

The article presents Ant Group's exploration of applying its data‑driven risk control and credit assessment capabilities to the traditional bulk commodity sector, detailing industry background, data pain points, core technical solutions, and the construction of a secure, explainable data‑model platform for digital transformation.

AIBig DataBulk Industry
0 likes · 13 min read
Risk Control and Data Application in the Bulk Commodity Industry: Challenges, Solutions, and Core Capabilities
Software Development Quality
Software Development Quality
Apr 30, 2024 · R&D Management

How to Build an Effective R&D Management Framework for Innovation Success

This guide outlines a comprehensive R&D management framework covering objectives, scope, team structure, process stages, requirement management, planning, monitoring, technology evaluation, quality assurance, knowledge sharing, risk and change management, reviews, acceptance, and documentation to boost efficiency and product quality.

Team Rolesprocess frameworkrisk management
0 likes · 7 min read
How to Build an Effective R&D Management Framework for Innovation Success
Architecture and Beyond
Architecture and Beyond
Apr 20, 2024 · Information Security

How to Secure User Assets in SaaS: Strategies, Policies, and Pitfalls

The article defines user assets, explains why protecting them is vital for SaaS companies, and outlines organizational, procedural, technical, and emergency-response measures—plus common challenges—to help enterprises build comprehensive user asset security programs.

SaaSdata protectioninformation security
0 likes · 17 min read
How to Secure User Assets in SaaS: Strategies, Policies, and Pitfalls
DataFunTalk
DataFunTalk
Apr 19, 2024 · Artificial Intelligence

Technology Maturity Curve – Financial Risk Control Overview

This article provides a comprehensive overview of the evolution, current state, and future trends of financial risk control technologies, covering data, feature engineering, modeling, decision-making, product development, challenges, and the impact of large AI models on the industry.

Big DataTechnology Maturityfinancial risk
0 likes · 29 min read
Technology Maturity Curve – Financial Risk Control Overview
21CTO
21CTO
Apr 14, 2024 · Fundamentals

8 Hard‑Won Lessons on Software Architecture Every Engineer Should Know

This reflective essay shares eight practical insights on software architecture—from the challenge of asking the right questions and deciding what not to build, to the pivotal role of non‑functional requirements, risk‑first design, and the paradox of simplicity—offering engineers actionable guidance for better architectural decisions.

continuous codingnon-functional requirementsrisk management
0 likes · 13 min read
8 Hard‑Won Lessons on Software Architecture Every Engineer Should Know
JD Tech
JD Tech
Apr 9, 2024 · Backend Development

Reflections on a Year of Growth, Technology, and Communication at JD Jinli Platform

This article shares a developer's year‑long journey at JD Jinli, covering personal growth, technical innovations such as points‑asset protection, risk mitigation, traffic governance, and communication best practices, while emphasizing how disciplined engineering and collaborative mindset drive business value.

Product DevelopmentSoftware Engineeringrisk management
0 likes · 25 min read
Reflections on a Year of Growth, Technology, and Communication at JD Jinli Platform
Chen Tian Universe
Chen Tian Universe
Apr 4, 2024 · Fundamentals

Essential Credit Glossary: 65 Key Loan and Financing Terms Explained

This comprehensive glossary explains 65 essential credit and financing terms—from borrower and lender roles to loan products, risk controls, contract clauses, and post‑loan processes—providing a clear reference for anyone working with loan products or financial platforms.

Bankingcreditfinancial terms
0 likes · 27 min read
Essential Credit Glossary: 65 Key Loan and Financing Terms Explained
Efficient Ops
Efficient Ops
Apr 2, 2024 · Operations

What Do Leading Tech Giants Expect from SREs? Job Posting Insights

Amid economic growth and frequent continuity incidents, major internet firms are redefining SRE roles, emphasizing cost reduction, system resilience, risk management, AI‑driven operations, and close collaboration with development teams, as revealed by a detailed analysis of recent job postings from Ant Group, Alibaba, ByteDance and others.

AI NativeSREcost optimization
0 likes · 9 min read
What Do Leading Tech Giants Expect from SREs? Job Posting Insights
Model Perspective
Model Perspective
Mar 21, 2024 · Fundamentals

How the “Maximum Regret Principle” Guides Decision‑Making: A Mathematical Model Explained

The article introduces Zhang Ruimin’s “maximum regret principle,” explains its mathematical formulation using regret matrices and utility functions, and demonstrates its application through a concrete investment decision example that shows how minimizing the worst‑case regret leads to robust choices.

Business StrategyDecision Theorymathematical modeling
0 likes · 5 min read
How the “Maximum Regret Principle” Guides Decision‑Making: A Mathematical Model Explained
Huolala Tech
Huolala Tech
Mar 19, 2024 · Information Security

How AI and Big Data Transform Information Security Risk Management

This article examines the evolution of information security risk management—from classic standards like GB/T20984 and ISO27001 to modern AI‑driven, big‑data approaches—detailing risk definitions, quantitative models, international guidelines, and future research directions.

Bayesianinformation securityrisk management
0 likes · 14 min read
How AI and Big Data Transform Information Security Risk Management
Chen Tian Universe
Chen Tian Universe
Mar 18, 2024 · Operations

How to Build a Cross‑Border Card Acquiring System for Third‑Party Payment Platforms

The article examines the rapid growth of China's foreign‑card acquiring market, outlines its distinctive features such as expanding transaction volume, diversified payment methods, heightened risk‑control requirements, and explains the technical architecture, modules, and operational processes needed for third‑party payment providers to launch cross‑border card acquiring services.

Cross-border Paymentscard acquiringfinancial technology
0 likes · 26 min read
How to Build a Cross‑Border Card Acquiring System for Third‑Party Payment Platforms
Data Thinking Notes
Data Thinking Notes
Feb 27, 2024 · Information Security

How to Build an Effective Enterprise Data Security Governance System

This article explores enterprise data security governance, outlining practical methodologies, implementation pathways, and real-world case studies to guide organizations in planning and establishing robust data security governance frameworks while highlighting key challenges, compliance considerations, and measurable outcomes for sustained protection.

compliancedata securityenterprise
0 likes · 2 min read
How to Build an Effective Enterprise Data Security Governance System
Chen Tian Universe
Chen Tian Universe
Feb 18, 2024 · Operations

How Integrated Business‑Finance Systems Boost Decision‑Making and Risk Management

The article explains how integrating business, finance, and management data—known as business‑finance integration—provides real‑time insight, improves compliance and risk control, enhances productivity, and creates actionable financial metrics, while outlining the necessary system architecture and implementation steps.

Data‑Driven Decision Makingbusiness finance integrationfinancial reporting
0 likes · 12 min read
How Integrated Business‑Finance Systems Boost Decision‑Making and Risk Management
Test Development Learning Exchange
Test Development Learning Exchange
Feb 2, 2024 · Product Management

Understanding AB Testing: Risks, Benefits, and Best Practices

AB testing is a statistical method for comparing multiple strategies or versions to determine the most effective one, and this article explains its risks, mitigation measures, advantages, key dimensions, step‑by‑step workflow, fairness considerations, data‑cleaning techniques, target goals, design guidelines, and alternative experimental approaches.

AB testingconversion rateexperiment design
0 likes · 9 min read
Understanding AB Testing: Risks, Benefits, and Best Practices
Advanced AI Application Practice
Advanced AI Application Practice
Feb 1, 2024 · R&D Management

A Core Roadmap for Effective Quality Assurance

The article outlines a practical roadmap for quality assurance across the software lifecycle, highlighting the pivotal roles of clear requirements, sound technical implementation, risk and project management, and measurable cost metrics, while stressing the need for solid processes and infrastructure.

InfrastructureProject ManagementQuality Assurance
0 likes · 8 min read
A Core Roadmap for Effective Quality Assurance
AntTech
AntTech
Jan 18, 2024 · Information Security

The Value of Security Technology in the Digital Age – Summary of Lü Peng’s Report Presentation

The report released by the Chinese Academy of Social Sciences and Ant Group highlights how security technology, now a public good alongside AI, is essential for managing accelerating digital risks, outlines its four pillars, and proposes collaborative strategies to make security technology a universal, socially responsible foundation for the digital society.

AI riskdigital societyinformation security
0 likes · 14 min read
The Value of Security Technology in the Digital Age – Summary of Lü Peng’s Report Presentation
DataFunSummit
DataFunSummit
Jan 15, 2024 · Artificial Intelligence

Financial Large Language Model: Characteristics, Construction, Architecture, and Practical Applications

This article presents a comprehensive overview of financial large language models, covering their unique characteristics, construction methods, layered technical architecture, evaluation strategies, and real‑world use cases such as quality inspection, AIGC‑driven material generation, sales‑lead mining, and knowledge‑graph‑enhanced intelligent Q&A.

Data EngineeringFinancial AImodel architecture
0 likes · 14 min read
Financial Large Language Model: Characteristics, Construction, Architecture, and Practical Applications
DeWu Technology
DeWu Technology
Jan 8, 2024 · Backend Development

Overview of Payment System Evolution, Architecture, and Practices

The article traces payment system evolution from early ticket‑house methods to modern real‑time settlement, explains core concepts, architecture, APIs, fund and information flows, security and two‑level clearing mechanisms, and how order‑payment interactions should be designed for reliable e‑commerce transactions.

Settlementarchitecturee-commerce
0 likes · 24 min read
Overview of Payment System Evolution, Architecture, and Practices
dbaplus Community
dbaplus Community
Jan 7, 2024 · Databases

How to Cut MySQL Storage Costs by Over 50%: A Practical Framework

This article presents a systematic, nine‑grid method for reducing MySQL storage expenses—including table compression, JSON field serialization, and hot‑cold data separation—while quantifying benefits, ensuring data safety, and validating system stability through staged testing and SRE metrics.

Database Cost ReductionMySQLPerformance Testing
0 likes · 13 min read
How to Cut MySQL Storage Costs by Over 50%: A Practical Framework
ITPUB
ITPUB
Dec 27, 2023 · Operations

When a Snapshot Share Became a Data Leak: Lessons from a Cloud Ops Failure

A developer mistakenly set a cloud disk snapshot to public, exposing a major client’s data, and recounts the frantic rollback, the ensuing panic among teammates, and the hard‑won operational lessons about high‑risk manual tasks, proper safeguards, and the need for visualized tooling.

Operationsdata securityincident response
0 likes · 10 min read
When a Snapshot Share Became a Data Leak: Lessons from a Cloud Ops Failure
DevOps
DevOps
Dec 13, 2023 · Product Management

Agile Estimation Techniques, Risk Management, and Best Practices

This article explores the nature of agile estimation, details popular techniques such as Planning Poker, T‑Shirt Sizing, Story Points, Affinity and Wideband Delphi, and provides comprehensive risk‑management strategies and best‑practice recommendations to improve forecasting accuracy and project success.

Planning Pokerbest practicesestimation
0 likes · 9 min read
Agile Estimation Techniques, Risk Management, and Best Practices
Test Development Learning Exchange
Test Development Learning Exchange
Dec 2, 2023 · R&D Management

Comprehensive Guide for Test Team Leaders on Culture, Performance, Staffing, and Remote Management

This article provides test team leaders with practical strategies for handling cultural resistance, setting KPI performance metrics, managing staff turnover, resolving conflicts with developers, creating effective weekly reports, determining hiring needs, overseeing new business lines, controlling project progress and risks, reporting results, and successfully managing remote teams.

Staffingperformance metricsremote work
0 likes · 17 min read
Comprehensive Guide for Test Team Leaders on Culture, Performance, Staffing, and Remote Management
JD Tech
JD Tech
Nov 23, 2023 · R&D Management

Applying Sun Tzu’s Art of War Principles to Project Management

The article explores how Sun Tzu’s strategic concepts—such as aligning with goals, timing, resources, leadership qualities, and governance—can guide project selection, preparation, execution, and risk management, offering a blend of scientific and artistic approaches to improve project success rates.

Project ManagementSun Tzuagile
0 likes · 10 min read
Applying Sun Tzu’s Art of War Principles to Project Management
Amap Tech
Amap Tech
Nov 21, 2023 · Fundamentals

The Essence of Quality Assurance and the Value of Testing Roles

Quality assurance is fundamentally about exhaustive falsification to lower online risk, while the testing process seeks optimal ROI by balancing defect discovery against resource investment; a tester’s value hinges on business risk, system maturity, and the ability to become increasingly irreplaceable through deep domain knowledge, proactive risk mitigation, and innovative, end‑to‑end quality solutions.

Quality AssuranceROISoftware testing
0 likes · 11 min read
The Essence of Quality Assurance and the Value of Testing Roles
Architect
Architect
Nov 12, 2023 · R&D Management

Project Management for Developers: Why It Matters and How to Excel

This article explains why project management is essential for developers, outlines common pain points such as inaccurate workload estimation and dependency issues, and provides detailed guidance on progress, quality, and risk management, including practical techniques, checklists, and tools to improve efficiency and deliver successful projects.

Project ManagementQuality Assurancedeveloper productivity
0 likes · 38 min read
Project Management for Developers: Why It Matters and How to Excel
Selected Java Interview Questions
Selected Java Interview Questions
Nov 12, 2023 · Backend Development

Implementing the Chain of Responsibility Pattern for Login Risk Management in Java

This article explains the Chain of Responsibility design pattern and demonstrates how to apply it in a Java backend to evaluate login risk factors such as password errors, unusual login times, IP whitelist violations, and abnormal login locations, providing full code examples and execution flow.

Chain of ResponsibilityDesign PatternLogin Risk
0 likes · 16 min read
Implementing the Chain of Responsibility Pattern for Login Risk Management in Java
Efficient Ops
Efficient Ops
Nov 1, 2023 · Information Security

How CICC Reached Advanced DevSecOps Standards: Inside Their Security Success

The article details CICC's successful completion of multiple DevSecOps assessments, shares interview insights from senior IT leaders on cultural, process, and technical implementations, and provides an overview of the DevOps capability maturity model and industry participation statistics, illustrating how standardized DevOps practices boost security and efficiency.

Case studyContinuous DeliveryDevOps
0 likes · 16 min read
How CICC Reached Advanced DevSecOps Standards: Inside Their Security Success
Architects Research Society
Architects Research Society
Nov 1, 2023 · Information Security

Roles and Responsibilities of a Security Architecture Team

The article outlines the composition and responsibilities of a security architecture team, detailing the roles of Security Architect, Information Security Architect, CISO, and Security Analyst, their required business and technical skills, risk management, threat modeling, and how they integrate with enterprise architecture.

CISOSecurity RolesThreat modeling
0 likes · 11 min read
Roles and Responsibilities of a Security Architecture Team
FunTester
FunTester
Nov 1, 2023 · Fundamentals

Understanding and Managing Technical Debt in Software Development

This article explains what technical debt is, its harmful effects, common scenarios that generate it, common misconceptions, and practical strategies for managing and repaying technical debt to keep software projects maintainable and cost‑effective.

Software Engineeringcode qualityrefactoring
0 likes · 25 min read
Understanding and Managing Technical Debt in Software Development
Tencent Cloud Developer
Tencent Cloud Developer
Oct 30, 2023 · Fundamentals

Understanding and Managing Technical Debt in Software Development

Technical debt—ranging from low‑level design flaws and inadequate testing to strategic shortcuts and evolving third‑party dependencies—accumulates when urgent product demands bypass best practices, leading to higher costs, slower delivery, and poorer quality, so teams must make debt visible, enforce strong completion criteria, and allocate regular sprint capacity to prioritize, refactor, and repay high‑interest debt while recognizing when legacy code can be retired.

refactoringrisk managementtechnical debt
0 likes · 25 min read
Understanding and Managing Technical Debt in Software Development
DataFunSummit
DataFunSummit
Oct 29, 2023 · Artificial Intelligence

Construction and Application of a Financial Event Knowledge Graph

This article describes the design, construction pipeline, and practical applications of a financial event knowledge graph, covering background challenges, multi‑layer modeling, information‑extraction techniques, and use cases such as institutional risk monitoring, wealth‑management recommendation, and industry‑chain analysis.

Event Extractionfinancial knowledge graphindustry chain analysis
0 likes · 14 min read
Construction and Application of a Financial Event Knowledge Graph
Architecture and Beyond
Architecture and Beyond
Oct 28, 2023 · Operations

Project Initiation: Importance, Process, and Common Issues

The article explains why proper project initiation is essential, defines its meaning, outlines its six key benefits, describes the three‑phase initiation workflow (preparation, decision, alignment), and highlights typical problems that can arise at each stage.

Project Managementdecision makingproject initiation
0 likes · 18 min read
Project Initiation: Importance, Process, and Common Issues
Efficient Ops
Efficient Ops
Oct 27, 2023 · Information Security

How CICC’s iBanker Project Achieved Advanced DevSecOps Certification

At the 2023 GOPS Global Operations Conference, China International Capital Corporation (CICC) showcased its successful DevSecOps Level‑2 assessments for two major projects, revealing detailed cultural, process, and technical practices that elevated its security posture and set a benchmark for the industry.

CICCDevOpsDevSecOps
0 likes · 15 min read
How CICC’s iBanker Project Achieved Advanced DevSecOps Certification
JD Retail Technology
JD Retail Technology
Oct 8, 2023 · Mobile Development

Cross‑Platform Development of JD Mini‑Program for Fast Delivery: Background, Action, Research, Progress, and Planning

This report details JD's mini‑program cross‑platform initiative for the Fast Delivery service, covering background, actions taken, research findings, progress achieved, planning considerations, risk mitigation, and expected benefits such as reduced cost, improved stability, and higher development efficiency.

JDdeploymentmini-program
0 likes · 9 min read
Cross‑Platform Development of JD Mini‑Program for Fast Delivery: Background, Action, Research, Progress, and Planning
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Oct 7, 2023 · Frontend Development

Why Adopt TypeScript in Frontend Development: Business Motivation, Error Analysis, Cost‑Benefit, and Implementation Plan

This article explains the business reasons for introducing TypeScript in a B‑end frontend product, analyzes common runtime type errors, compares TypeScript with plain JavaScript, evaluates costs, risks and benefits, and outlines a practical implementation roadmap.

FrontendTypeScriptcode quality
0 likes · 8 min read
Why Adopt TypeScript in Frontend Development: Business Motivation, Error Analysis, Cost‑Benefit, and Implementation Plan
Data Thinking Notes
Data Thinking Notes
Sep 24, 2023 · Information Security

How to Build a Robust Data Security Governance Framework: Steps & Best Practices

Data security governance, essential for modern enterprises, involves classifying and authorizing data, implementing scenario-based protections, and establishing comprehensive frameworks that address compliance, asset management, process control, and continuous improvement, guiding organizations through strategic planning, organizational structuring, policy creation, and ongoing operational monitoring.

compliancedata securityframework
0 likes · 15 min read
How to Build a Robust Data Security Governance Framework: Steps & Best Practices
JD Retail Technology
JD Retail Technology
Sep 20, 2023 · R&D Management

Applying Sun Tzu’s Art of War Principles to Project Management

This article interprets key concepts from Sun Tzu’s *Art of War*—such as strategic assessment, rapid execution, risk awareness, and adaptive tactics—and demonstrates how project managers can use them to select, plan, and lead projects successfully in volatile, uncertain, complex, and ambiguous environments.

Project ManagementSun Tzuagile
0 likes · 9 min read
Applying Sun Tzu’s Art of War Principles to Project Management
DevOps
DevOps
Sep 11, 2023 · Artificial Intelligence

How Generative AI Is Transforming the Workplace: Adoption, Risks, and Governance

This article explores how generative AI is reshaping workplace productivity, outlines the opportunities and risks of its adoption, and provides a strategic framework for governance, responsible use, and organizational alignment to maximize benefits while mitigating intellectual‑property, ethical, and security concerns.

AI governanceenterprise adoptionproductivity
0 likes · 14 min read
How Generative AI Is Transforming the Workplace: Adoption, Risks, and Governance
NetEase LeiHuo Testing Center
NetEase LeiHuo Testing Center
Sep 8, 2023 · Game Development

Essential Skills and Practices for Game Functional Testing

This article outlines the hard and soft competencies required for game functional testing, including test case creation, bug tracking, risk awareness, communication, proactive work habits, learning ability, and innovation, while offering practical strategies to improve testing efficiency and product quality.

bug trackingfunctional testinggame testing
0 likes · 33 min read
Essential Skills and Practices for Game Functional Testing
DataFunTalk
DataFunTalk
Sep 2, 2023 · Artificial Intelligence

Artificial Intelligence in the Financial Sector: Applications, Challenges, and Future Trends – Interview with Li Jinlong

This interview explores how artificial intelligence, especially large language models, is transforming banking through digitalization, personalized services, risk management, and operational automation, while also highlighting data, model, and compute challenges that financial institutions must address to sustain AI-driven innovation.

Artificial IntelligenceBankingdigital transformation
0 likes · 10 min read
Artificial Intelligence in the Financial Sector: Applications, Challenges, and Future Trends – Interview with Li Jinlong
DeWu Technology
DeWu Technology
Aug 28, 2023 · Operations

Real-time Data Warehouse Business-Side Chaos Engineering Practice

The article describes how a real‑time data warehouse supporting ad‑delivery metrics adopts both technical and business‑side chaos‑engineering, using red‑blue team drills to inject faults, monitor indicator anomalies, and refine response procedures, thereby enhancing early risk detection, system resilience, and overall data stability for the advertising platform.

Chaos EngineeringData WarehousingMonitoring
0 likes · 16 min read
Real-time Data Warehouse Business-Side Chaos Engineering Practice
DeWu Technology
DeWu Technology
Aug 14, 2023 · Operations

Capital Loss Prevention Practices and Technical System

Dewu’s capital‑loss prevention framework embeds risk assessment and technical safeguards—such as idempotency, distributed consistency, and active‑active multi‑region design—into architecture, organizes three defensive lines (development, QA, SRE), and employs real‑time, near‑real‑time, and offline verification plus regular drills, while advancing automated analysis and intelligent scaling.

Data ConsistencyMonitoringSRE
0 likes · 10 min read
Capital Loss Prevention Practices and Technical System
DataFunSummit
DataFunSummit
Aug 12, 2023 · Information Security

Design and Exploration of Mobile Game Anti‑Fraud Systems

This article examines the mobile game black‑market ecosystem, outlines common fraud patterns such as script cheats, account trading, and illegal recharge, and presents a comprehensive anti‑fraud architecture that combines real‑time risk assessment, offline analysis, and adaptive mitigation strategies for game developers and operators.

AlgorithmGame SecurityMobile Gaming
0 likes · 21 min read
Design and Exploration of Mobile Game Anti‑Fraud Systems
NetEase LeiHuo Testing Center
NetEase LeiHuo Testing Center
Aug 11, 2023 · Game Development

Comprehensive Guide to Testing Short‑Term Game Activities

This article provides a detailed testing guide for short‑term game events, covering their unique challenges, requirement analysis, risk mitigation, test case preparation, execution strategies, communication practices, player experience considerations, log verification, post‑mortem analysis, and activity reuse recommendations.

Player ExperienceQA processgame testing
0 likes · 16 min read
Comprehensive Guide to Testing Short‑Term Game Activities
Sohu Tech Products
Sohu Tech Products
Aug 9, 2023 · Information Security

Software Supply Chain Security: Risks, Attacks, and Mitigation

The article explains software supply chain security across development, delivery, and usage phases, outlines ten common vulnerabilities and four attack categories, describes attack characteristics, examines risk factors in design, code, release, and operation stages, and presents comprehensive mitigation measures including SDL phases, DevSecOps practices, and detailed lifecycle controls.

DevSecOpsSDLrisk management
0 likes · 12 min read
Software Supply Chain Security: Risks, Attacks, and Mitigation
Alibaba Cloud Developer
Alibaba Cloud Developer
Aug 8, 2023 · R&D Management

Mastering Elegant Project Management for Technical PMs: Strategies and Models

This comprehensive guide explains why technical project managers must adopt an elegant mindset, master core project‑management concepts, choose appropriate software‑development models, apply agile practices, manage stakeholders, communication, and risks, and leverage essential tools to deliver successful projects in fast‑changing environments.

Project Managementagilerisk management
0 likes · 33 min read
Mastering Elegant Project Management for Technical PMs: Strategies and Models
Continuous Delivery 2.0
Continuous Delivery 2.0
Jul 31, 2023 · Information Security

15 Key Cybersecurity Metrics for Measuring and Improving Security Performance

The article outlines fifteen essential cybersecurity metrics—thirteen process indicators such as mean detection and response times, and two result indicators like data loss incidents and security ROI—to help organizations evaluate, monitor, and improve their security posture and inform investment decisions.

cybersecurityincident responserisk management
0 likes · 4 min read
15 Key Cybersecurity Metrics for Measuring and Improving Security Performance
Alibaba Cloud Developer
Alibaba Cloud Developer
Jul 21, 2023 · Information Security

Mastering Systematic Problem Solving for Complex Security Challenges

This article explores how to systematically tackle complex security problems by defining system thinking, distinguishing simple from complex issues, and applying a comprehensive, deep, and dynamic approach illustrated with a data‑leakage case study and practical recommendations for future security strategy.

Case studycomplex problemsinformation security
0 likes · 16 min read
Mastering Systematic Problem Solving for Complex Security Challenges
Tencent Cloud Developer
Tencent Cloud Developer
Jul 10, 2023 · Fundamentals

Understanding Technical Debt: Causes, Impacts, and Mitigation Strategies

Technical debt, the hidden cost of shortcuts across code, business, and team practices, grows from evolving technology, rapid business changes, and weak standards, but can be managed through disciplined analysis, standardized design, iterative planning, metric‑driven reviews, dedicated resources, and a professional, top‑down mindset.

development processrisk managementteam culture
0 likes · 15 min read
Understanding Technical Debt: Causes, Impacts, and Mitigation Strategies
vivo Internet Technology
vivo Internet Technology
Jun 14, 2023 · Information Security

Vivo Game Anti-Cheat Analysis: Identifying and Combating Black Market Fraud

The article examines Vivo’s gaming platform’s fight against black‑market fraud, outlining profit motives, types of illicit activities, brushing techniques, and the company’s three‑stage anti‑fraud framework—pre‑risk perception, in‑process detection, and post‑strike closure—illustrated with two real‑world case studies.

Game SecurityVivo platformanti-fraud
0 likes · 13 min read
Vivo Game Anti-Cheat Analysis: Identifying and Combating Black Market Fraud
Architects Research Society
Architects Research Society
Jun 10, 2023 · Information Security

Roles and Responsibilities of a Security Architecture Team

The article outlines the composition of a security architecture team, detailing the roles of security architect, information security architect, chief information security officer, and security analyst, along with their business and technical skills, organizational relationships, and key responsibilities in managing enterprise security.

CISOSecurity Analystinformation security
0 likes · 13 min read
Roles and Responsibilities of a Security Architecture Team
Zhaori User Experience
Zhaori User Experience
May 19, 2023 · Frontend Development

How to Tackle Unexpected UI Risks with Five‑Question Method and Rapid Prototyping

This article walks through a real‑world banking UI case, showing how an interaction designer uses risk classification, the five‑question method, rapid sketching, iterative feedback, and structured reporting to uncover hidden requirements, resolve design conflicts, and ensure robust frontend delivery.

Project ManagementUXcommunication
0 likes · 12 min read
How to Tackle Unexpected UI Risks with Five‑Question Method and Rapid Prototyping
DataFunTalk
DataFunTalk
May 5, 2023 · Operations

Project Management Overview: Ten Key Areas and Practical Tips

This article outlines ten essential components of project management—including overall management, scope, schedule, cost, quality, resources, communication, risk, procurement, and integration—while providing practical tips, stakeholder analysis methods, and visual guides to help teams execute projects efficiently.

Project ManagementStakeholder Analysisplanning
0 likes · 5 min read
Project Management Overview: Ten Key Areas and Practical Tips
Efficient Ops
Efficient Ops
Apr 26, 2023 · Operations

Building a Chaos Engineering Platform for Financial Services: Key Lessons

This talk outlines the challenges of maintaining system stability in fast‑moving, cloud‑native financial services, describes a risk‑identification model, high‑fidelity fault simulation, and a comprehensive stability engineering platform, and shares future plans for automated, data‑driven risk mitigation.

Chaos EngineeringFinancial ServicesOperations
0 likes · 15 min read
Building a Chaos Engineering Platform for Financial Services: Key Lessons
Efficient Ops
Efficient Ops
Apr 8, 2023 · Information Security

How China Postal Savings Bank Reached Advanced DevSecOps Maturity – Lessons and Practices

The article details China Postal Savings Bank's successful DevSecOps assessment at the 2023 GOPS Global Operations Conference, sharing the bank's project background, interview insights on culture, processes, and tooling, and outlining the benefits and future plans of adopting standardized DevSecOps practices.

BankingDevSecOpsMaturity Model
0 likes · 17 min read
How China Postal Savings Bank Reached Advanced DevSecOps Maturity – Lessons and Practices
Continuous Delivery 2.0
Continuous Delivery 2.0
Apr 7, 2023 · Operations

When to Release to Production: Distinguishing Continuous Delivery and Continuous Deployment

The article explains how continuous delivery keeps software always releasable while continuous deployment automates the actual release, discusses the trade‑offs of release frequency, risk, feedback types, and business considerations that guide the decision of when and how to push changes to production.

Continuous DeliveryContinuous Deploymentfeedback loops
0 likes · 9 min read
When to Release to Production: Distinguishing Continuous Delivery and Continuous Deployment
MoonWebTeam
MoonWebTeam
Mar 26, 2023 · R&D Management

Why Developers Must Master Project Management to Boost Efficiency and Career Growth

This article explains why software developers need solid project management skills, outlines common pain points such as inaccurate effort estimation, dependency delays, and quality‑efficiency trade‑offs, and provides practical guidance on progress, quality, and risk management—including work breakdown, dependency handling, code review, testing, logging, and risk mitigation—to help engineers deliver projects on time, with high quality, and with minimal surprises.

Project ManagementQuality Assuranceprogress management
0 likes · 38 min read
Why Developers Must Master Project Management to Boost Efficiency and Career Growth
DataFunSummit
DataFunSummit
Mar 23, 2023 · Artificial Intelligence

ChatGPT Technical Analysis, Engineering Applications, and Towards Engineered AGI

This article provides a comprehensive technical analysis of ChatGPT, covering its cognitive model, model‑as‑a‑service architecture, front‑end integration, internal structure, API design, engineering challenges, risk‑aware AGI development, and future outlook for AI‑driven software engineering.

AGIArtificial IntelligenceChatGPT
0 likes · 12 min read
ChatGPT Technical Analysis, Engineering Applications, and Towards Engineered AGI
Tencent Cloud Developer
Tencent Cloud Developer
Mar 20, 2023 · R&D Management

A Developer's Guide to Project Management: Schedule, Quality, and Risk

The article teaches developers essential project‑management skills—schedule, quality, and risk management—by explaining why coordination matters, outlining common pain points, and detailing practical techniques such as two‑day task decomposition, code‑review standards, and systematic risk identification and mitigation to become reliable, results‑driven partners.

Project ManagementQuality Assurancedeveloper skills
0 likes · 37 min read
A Developer's Guide to Project Management: Schedule, Quality, and Risk
JD Tech
JD Tech
Mar 14, 2023 · Operations

Introduction to Chaos Engineering and Its Practical Exercise Workflow

This article offers a comprehensive overview of chaos engineering, explaining its definition, why it is needed, the value it brings, a detailed step‑by‑step practice workflow—including preparation, execution, recovery and review phases—typical drill scenarios, key assessment metrics, and risk‑control measures to improve system reliability and high‑availability.

Chaos Engineeringfault injectionrisk management
0 likes · 11 min read
Introduction to Chaos Engineering and Its Practical Exercise Workflow
Xiaohongshu Tech REDtech
Xiaohongshu Tech REDtech
Feb 8, 2023 · Information Security

Exploring and Practicing Community Anti-Cheat Strategies at Xiaohongshu

The presentation outlines Xiaohongshu’s comprehensive community anti‑cheat strategy, defining cheating risks across industries, mapping the black‑gray ecosystem, and detailing a five‑module framework—risk perception, capability building, identification, mitigation, and evaluation—implemented via layered data architecture and multi‑stage detection to protect platform integrity.

Data Analysisanti-cheatfraud detection
0 likes · 17 min read
Exploring and Practicing Community Anti-Cheat Strategies at Xiaohongshu
Continuous Delivery 2.0
Continuous Delivery 2.0
Jan 10, 2023 · Information Security

Understanding Software Supply Chain Security and the SLSA Framework

The article explains why software supply chain security is increasingly critical, introduces the SLSA (Supply‑Chain Levels for Software Artifacts) framework and its three trust boundaries, outlines common risk points from code commit to package distribution, and discusses mitigation strategies such as mandatory code review, robot‑account controls, and automation.

CI/CDSLSAinformation security
0 likes · 11 min read
Understanding Software Supply Chain Security and the SLSA Framework
AntTech
AntTech
Jan 9, 2023 · Artificial Intelligence

Overview of the Financial Big Data Anti‑Fraud Technology Whitepaper

This article introduces the Ant Group and Tsinghua University’s Financial Big Data Anti‑Fraud Technology Whitepaper, outlining the new legal context, fraud characteristics, and a three‑stage detection framework that leverages multi‑dimensional graphs, trustworthy AI, and data security to improve pre‑, during‑, and post‑transaction risk management.

AIanti-fraudfinancial data
0 likes · 9 min read
Overview of the Financial Big Data Anti‑Fraud Technology Whitepaper
Efficient Ops
Efficient Ops
Dec 28, 2022 · Information Security

How China Agricultural Bank Achieved Advanced DevSecOps Maturity

In a detailed interview, senior engineers from China Agricultural Bank explain how their mobile banking payment and micro‑loan platforms passed the CAICT DevSecOps Level‑2 assessment, outlining the cultural, process, and technical measures—such as integrated security testing tools and cross‑department collaboration—that boosted security, efficiency, and digital transformation.

BankingDevOpsDevSecOps
0 likes · 14 min read
How China Agricultural Bank Achieved Advanced DevSecOps Maturity
NetEase LeiHuo Testing Center
NetEase LeiHuo Testing Center
Dec 16, 2022 · Game Development

Risk Management and Mitigation Strategies for QA in Game Development

This article compiles real-world examples and practical guidance for identifying, assessing, and mitigating risks throughout the game development lifecycle, offering QA teams concrete strategies for risk definition, early estimation, and handling of demand, quality, process, testing, and operational challenges to improve overall risk management.

Game DevelopmentQAprocess
0 likes · 38 min read
Risk Management and Mitigation Strategies for QA in Game Development
DaTaobao Tech
DaTaobao Tech
Dec 12, 2022 · Fundamentals

Testing Process and Test Case Design for Activity Lottery Feature

The article outlines a complete testing workflow for an activity lottery feature—from requirement evaluation, design, and case creation using equivalence and scenario‑based methods, through execution, gray‑release verification, and post‑release monitoring—emphasizing risk analysis, stability governance, rate‑limit safeguards, and financial loss prevention to ensure reliable, high‑quality releases.

Quality AssuranceSoftware testingTest Case Design
0 likes · 18 min read
Testing Process and Test Case Design for Activity Lottery Feature
Zhongtong Tech
Zhongtong Tech
Nov 18, 2022 · Information Security

Data Security Insights from CIS 2022: Balancing Compliance and Business Growth

At the CIS 2022 Cybersecurity Innovation Conference in Shanghai, ZTO Express’s security chief shared practical strategies for data security governance, highlighting legal compliance, management vs. technical controls, and the emerging role of privacy computing in sustaining business operations.

Enterprise Securitycompliancedata security
0 likes · 5 min read
Data Security Insights from CIS 2022: Balancing Compliance and Business Growth
Baidu Tech Salon
Baidu Tech Salon
Nov 14, 2022 · Artificial Intelligence

How Risk‑Driven Delivery Boosts Test Efficiency with AI‑Powered Quality Models

This article analyzes Baidu's risk‑driven delivery approach, detailing how machine‑learning models identify, control, and decide on testing risks, replace manual judgments, improve test efficiency and quality, and deliver measurable savings and bug interceptions across large‑scale software projects.

Logistic RegressionSoftware testingautomated delivery
0 likes · 13 min read
How Risk‑Driven Delivery Boosts Test Efficiency with AI‑Powered Quality Models
Baidu Geek Talk
Baidu Geek Talk
Nov 14, 2022 · Artificial Intelligence

Risk‑Driven Delivery and Quality Assessment Model for Intelligent Testing

Baidu’s risk‑driven delivery system applies a machine‑learning quality‑assessment model that automatically identifies, controls, and decides testing risks across over 50 features, enabling precise test selection, intercepting hundreds of bugs, cutting test waiting time from 50 to 2 hours, and paving the way toward fully automated intelligent testing.

AISoftware testingquality assessment
0 likes · 15 min read
Risk‑Driven Delivery and Quality Assessment Model for Intelligent Testing
Architects Research Society
Architects Research Society
Nov 11, 2022 · Fundamentals

Digital Transformation Framework (DTF): A Comprehensive Reference Model for Modeling, Pricing, and Planning Digital Strategies

This article introduces the Digital Transformation Framework (DTF), a reference model that helps organizations define, model, price, and plan digital strategies by integrating business, financial, and technical dimensions, while addressing risk, cultural change, and implementation pathways.

Pricingrisk managementstrategy
0 likes · 23 min read
Digital Transformation Framework (DTF): A Comprehensive Reference Model for Modeling, Pricing, and Planning Digital Strategies
DevOps Cloud Academy
DevOps Cloud Academy
Oct 17, 2022 · Information Security

Tencent Cloud’s DevSecOps Practices and Open‑Source Governance – Conference Presentation

In a CIS2021 conference talk, Tencent Cloud’s product security lead outlines the company’s DevSecOps journey, detailing challenges of heterogeneous infrastructure, a risk‑introduction workflow, multi‑stage security evolution, tool integration, metrics, and open‑source governance practices.

Cloud securityDevSecOpsTencent Cloud
0 likes · 15 min read
Tencent Cloud’s DevSecOps Practices and Open‑Source Governance – Conference Presentation
Architects Research Society
Architects Research Society
Oct 13, 2022 · Artificial Intelligence

Six Business Risks of Ignoring AI Ethics and Governance

Neglecting AI ethics and governance can expose companies to severe public‑relations crises, biased outcomes, regulatory penalties, unexplainable systems, and employee disengagement, ultimately threatening both societal trust and business sustainability.

AI ethicsBiasExplainability
0 likes · 13 min read
Six Business Risks of Ignoring AI Ethics and Governance
Software Development Quality
Software Development Quality
Aug 19, 2022 · Operations

Comprehensive Quality Management SLA Framework for IT Services

This document outlines a detailed Service Level Agreement (SLA) framework covering quality service standards, management processes, testing capabilities, tool support, resource management, measurement systems, risk handling, and continuous improvement to ensure consistent delivery and customer satisfaction across IT operations.

OperationsSLAprocess improvement
0 likes · 17 min read
Comprehensive Quality Management SLA Framework for IT Services
DevOps
DevOps
Aug 15, 2022 · R&D Management

Case Study: Unintended Data Upload Incident and Process Improvement Lessons

This article recounts a real-world incident where a junior engineer mistakenly uploaded production data to a pre‑release environment, analyzes the root causes, outlines concrete process improvements, and highlights broader lessons on risk‑aware development and the importance of holistic business‑logic security.

Incident ManagementR&D Managementprocess improvement
0 likes · 8 min read
Case Study: Unintended Data Upload Incident and Process Improvement Lessons
AntTech
AntTech
Aug 11, 2022 · Information Security

Ant Financial's End‑to‑End Mobile Security Architecture and Future Trends

The article outlines Ant Financial’s evolving mobile endpoint security strategy, detailing three development stages, the challenges of balancing security with user experience, risk pre‑emptive control, and privacy compliance, and introduces the AntDTX trusted middleware that integrates hardware and software for cloud‑edge collaborative risk mitigation.

Endpoint Protectioncloud‑edge collaborationprivacy compliance
0 likes · 15 min read
Ant Financial's End‑to‑End Mobile Security Architecture and Future Trends
Ziru Technology
Ziru Technology
Aug 5, 2022 · Information Security

Why Network Security Incident Response Matters: Strategies, Plans, and Real‑World Cases

This article outlines the current state of network security in China, the government's strong emphasis on it, the legal framework, the necessity of incident response, detailed emergency‑response procedures, Ziru's own security program, and three illustrative case studies including Log4j2, a 2021 drill, and a FastJson vulnerability.

Case studycybersecurityemergency planning
0 likes · 11 min read
Why Network Security Incident Response Matters: Strategies, Plans, and Real‑World Cases
DevOps
DevOps
Jul 19, 2022 · R&D Management

Quality Assurance Strategies for Technical Improvement Projects

The article outlines comprehensive quality‑assurance approaches for technical improvement projects—such as large‑scale refactoring, architecture upgrades, and migrations—by emphasizing risk‑driven planning, automated testing, business‑centric reviews, non‑functional requirement validation, and continuous knowledge sharing.

R&D ManagementSoftware Engineeringautomated testing
0 likes · 11 min read
Quality Assurance Strategies for Technical Improvement Projects
AntTech
AntTech
Jul 12, 2022 · Artificial Intelligence

AI Visual Anti‑Fraud Model Battles QR Code Abuse in the Beverage Industry

The article describes how Ant Group's AI visual anti‑fraud system, built by vision engineers, combats large‑scale QR‑code fraud targeting beverage bottle caps, detailing the black‑gray industry's tactics, the model's rapid detection capabilities, continuous unsupervised learning upgrades, and its broader applications in remote‑sensing and risk management.

AIQR codeUnsupervised Learning
0 likes · 13 min read
AI Visual Anti‑Fraud Model Battles QR Code Abuse in the Beverage Industry
dbaplus Community
dbaplus Community
Jul 2, 2022 · Information Security

How Top Banks Deploy DevSecOps to Strengthen Enterprise Security – Insights from a 2022 GDevOps Summit

The article summarizes Wei Yadong’s 2022 GDevOps Global Agile Operations Summit talk, covering the escalating threat landscape, financial industry security requirements, practical DevSecOps strategies, ICBC’s security transformation, and future trends such as security mesh, privacy‑enhancing computation, and decision intelligence.

DevSecOpsFinancial ServicesSecurity Operations
0 likes · 23 min read
How Top Banks Deploy DevSecOps to Strengthen Enterprise Security – Insights from a 2022 GDevOps Summit
AntTech
AntTech
Jun 29, 2022 · Big Data

YoDA: Reducing Entropy in Ant Financial Risk Data Systems through White‑Box, Logical, and Integrated Approaches

The YoDA project tackles the growing entropy of Ant Financial's risk data platform by introducing white‑box visibility, logical abstraction, and integrated heterogeneous fusion, enabling systematic governance, cost reduction, and consistent decision‑making across online, offline, and near‑line environments.

AIData EngineeringEntropy Reduction
0 likes · 21 min read
YoDA: Reducing Entropy in Ant Financial Risk Data Systems through White‑Box, Logical, and Integrated Approaches
Programmer DD
Programmer DD
Jun 23, 2022 · Information Security

How to Build an Effective Security Awareness Training Program: A Six‑Step Guide

This article examines the Capital One breach case and outlines a comprehensive six‑step framework for enterprises to develop, implement, and continuously improve security awareness training, covering legal foundations, project planning, material preparation, execution scheduling, performance tracking, and post‑training optimization.

Training Programcomplianceinformation security
0 likes · 7 min read
How to Build an Effective Security Awareness Training Program: A Six‑Step Guide
DataFunTalk
DataFunTalk
Jun 21, 2022 · Information Security

Trusted Traffic Governance and Anti‑Fraud Strategies Using Captcha

This talk explains how to use semantic-driven captcha mechanisms to classify and manage trusted versus untrusted traffic, detailing anti‑fraud strategies, flow identification, countermeasures against simulator and protocol cracking, and proactive updates to stay ahead of black‑market attacks.

Traffic Classificationadversarial attacksanti-fraud
0 likes · 15 min read
Trusted Traffic Governance and Anti‑Fraud Strategies Using Captcha
Efficient Ops
Efficient Ops
Jun 12, 2022 · Operations

Why Ops Must Respect Data: Essential Backup and Release Practices

The article emphasizes that operations teams must treat data with reverence, outlining comprehensive backup strategies, routine file‑system maintenance, database and big‑data safeguards, disciplined release processes, and meticulous change‑management practices to mitigate risks and ensure system stability.

Release Managementdata backuprisk management
0 likes · 9 min read
Why Ops Must Respect Data: Essential Backup and Release Practices
Meituan Technology Team
Meituan Technology Team
May 26, 2022 · Information Security

Building and Deploying Software Composition Analysis (SCA) for Enterprise Security

The article analyzes the rising threat of open‑source components, explains Software Composition Analysis (SCA) and SBOM generation, outlines the three‑stage process for building an in‑house SCA capability, discusses practical challenges such as data quality and integration, and looks ahead to future standards and open‑source tools.

DevSecOpsNLPOpen Source
0 likes · 37 min read
Building and Deploying Software Composition Analysis (SCA) for Enterprise Security
Baidu Geek Talk
Baidu Geek Talk
May 23, 2022 · Industry Insights

How Baidu Scales Real-Time Content Safety for Millions of Mini‑Programs

This article explains Baidu's evolving inspection scheduling system for its smart mini‑programs, detailing the challenges of massive page volumes, the V1.0 offline architecture, the V2.0 real‑time enhancements, resource constraints, deduplication logic, and the measurable improvements in risk detection and ecosystem health.

Big DataCloud ComputingReal-time Streaming
0 likes · 17 min read
How Baidu Scales Real-Time Content Safety for Millions of Mini‑Programs
DataFunSummit
DataFunSummit
May 17, 2022 · Information Security

Data Security Governance Practices and Frameworks: A Comprehensive Overview

This article presents a detailed overview of data security governance in China, covering policy milestones, major security incidents, current challenges, a three‑layer governance model, practical workflow steps, classification methods, emerging zero‑trust concepts, and real‑world case studies, offering actionable insights for organizations seeking robust data protection.

Big Datadata securitygovernance
0 likes · 11 min read
Data Security Governance Practices and Frameworks: A Comprehensive Overview
Programmer DD
Programmer DD
May 17, 2022 · Operations

Why Full‑Link Load Testing in Production Is the Key to Business Continuity

This article explains the importance of conducting full‑link load testing in production environments, outlines the evolution and solution architecture, describes key technologies such as traffic coloring, data isolation and risk control, and shares practical implementation steps and customer case studies from Alibaba.

Performance Testingcapacity planningfull-link load testing
0 likes · 19 min read
Why Full‑Link Load Testing in Production Is the Key to Business Continuity