Africa Tech Insights

Real cybersecurity training for the real world. We take the complex theories of CompTIA Security+ and SecAI+ and translate them into actionable skills. Whether you're fighting off Prompt Injection attacks or just fighting to get your first IT job, the Sec Guy has your back. Join us for deep dives into AI Security, Network Defense, and the future of cyber.

SecAI+ Domain 4.2: Compliance & Law

The Final Objective: Mastering the Law and Frameworks for global AI compliance.

In the finale of our SecAI+ course, we cover Objective 4.3: Compliance and Frameworks. We break down the EU AI Act's risk-based approach, the four core functions of the NIST AI RMF, and the critical ISO standards (42001, 23894, 22989) you need for the exam. Plus, learn about Data Sovereignty and how the OECD Principles impact security architecture.

📝 Pass the Exam: Take the practice quiz and join the Discord study group at: secguy.org

📍 Timestamps (Chapters):

00:00 – Introduction: The Law of AI

00:30 – The EU AI Act: Global Impact

00:44 – The 4 Levels of AI Risk & Regulation

01:43 – NIST AI Risk Management Framework (RMF)

02:13 – ISO 42001: AI Management Systems

02:29 – ISO 23894 & 22989: Risk & Terminology

02:58 – Data Sovereignty & GDPR

03:24 – Course Wrap-up: You're Ready!

#EUAIAct #NIST #ISO42001 #SecAI #CyberSecurityLaw #SecGuy

Published: 2026-02-02

SecAi+ Domain 4.1: AI CoE, Responsible AI, and AI RIsk

From the server room to the boardroom: Mastering AI GRC for the SecAI+ Exam.

This episode covers Domain 4: AI Governance, Risk, and Compliance. We explore the AI Center of Excellence (CoE), identify the Builders, Defenders, and Watchers on an AI team, and deep-dive into the dangers of Shadow AI. Learn the essential Responsible AI Principles—Fairness, Transparency, and Accountability—needed to pass objective 4.1.

🎓 Join the Mission: Get free practice tests and the Python for Security module at: secguy.org

📍 Timestamps (Chapters):

00:00 – Introduction to AI GRC (Domain 4)

00:28 – The AI Center of Excellence (CoE)

00:50 – Team Roles: Builders vs. Defenders

01:23 – Team Roles: The Watchers (Auditors & Analysts)

01:40 – Shadow AI vs. Shadow IT

02:17 – Beyond Data: Safety & Reputational Risk

02:35 – Responsible AI Principles: Fairness & Transparency

02:50 – Accountability = Human (Avoiding Bias)

03:13 – Coming Up: EU AI Act & Regulatory Frameworks

#AI #Governance #SecAI #CompTIA #RiskManagement #SecGuy

Published: 2026-02-02

SecAI+ Domain 3.3: The AI Analyst (Blue Team Tools, MCP & Co-Pilot)

We have seen the weapons (Video 10). Now, let’s look at the shields. Welcome to Domain 3: AI-Assisted Security. In this video (Objective 3.3), we switch to the Blue Team.

We are breaking down the "AI Co-Pilot" stack, the new hardware you need to know for the exam, and the critical standard that connects AI to your internal data without causing a leak.

In this video, we cover:

The AI Co-Pilot: IDE vs. CLI Plugins (GitHub Copilot vs. Terminal Assistants).

Critical Exam Term: Model Context Protocol (MCP)—The standard for connecting AI to secure internal servers.

Analysis Tools: Vulnerability Analysis, Anomaly Detection, Summarization, and Real-Time Translation.

Hardware: NVIDIA Jetson Nano Orin (Edge AI) and Vector Databases.

Privacy: Using Ollama to run local LLMs and prevent data leaks.

Timecodes:

0:00 - Intro: Switching to the Blue Team

0:25 - The AI Co-Pilot (IDE vs. CLI Plugins)

1:00 - CRITICAL TERM: Model Context Protocol (MCP)

1:30 - Analysis Tools: Vuln Scans & Translation

2:15 - Anomaly Detection & Vector Databases