12. Data and AI platform
- DASF-R-12.1 — Lack of vulnerability management
- DASF-R-12.2 — Lack of penetration testing, red teaming and bug bounty
- DASF-R-12.3 — Lack of incident response
- DASF-R-12.4 — Unauthorized privileged access
- DASF-R-12.5 — Poor security in the software development lifecycle
- DASF-R-12.6 — Lack of compliance
- DASF-R-12.7 — Initial Access