https://bpm.tips/tag/security Powered by Question2Answer https://bpm.tips/3559/how-should-ai-outputs-be-governed-inside-baw-process-human-in-the-loop-confidence-thresholds-audit-pii-prompt-injection Before we put generative AI or ML predictions into customer-facing processes, risk management asks how decisions are controlled and audited. What process design patterns keep AI in BAW governable? https://bpm.tips/3559/how-should-ai-outputs-be-governed-inside-baw-process-human-in-the-loop-confidence-thresholds-audit-pii-prompt-injection Sun, 06 Sep 2026 14:00:36 +0000 https://bpm.tips/3505/who-can-see-which-process-instances-and-tasks-in-baw-and-how-do-i-restrict-instance-visibility-per-business-unit Managers of one region must not see instances of another region in the portal, saved searches or Process Inspector. Which rules decide instance and task visibility, and how do we restrict them without building a custom portal? https://bpm.tips/3505/who-can-see-which-process-instances-and-tasks-in-baw-and-how-do-i-restrict-instance-visibility-per-business-unit Sun, 06 Sep 2026 13:51:14 +0000 https://bpm.tips/3441/how-do-i-secure-coach-views-and-rest-calls-against-a-strict-content-security-policy-and-clickjacking-headers-on-baw Security asked us to add Content-Security-Policy and X-Frame-Options headers on the BAW web tier. After that, coaches with inline scripts broke and the portal iframe stopped rendering. What is compatible with coaches and what needs code changes? https://bpm.tips/3441/how-do-i-secure-coach-views-and-rest-calls-against-a-strict-content-security-policy-and-clickjacking-headers-on-baw Sun, 06 Sep 2026 13:39:49 +0000