#risk-assessment

End-to-end NLP pipeline for automated contract analysis and risk assessment using CUAD and fine-tuned RoBERTa-Legal. Integrates spaCy NER, rule-based heuristics, and Pinecone for semantic search, with REST API deployment, containerization, and full test coverage for legal/compliance research.

AI Audit State framework: analyzing capital, energy & labor constraints for systemic risk.

Live DSPM Posture Simulator — Azure AI agent data exposure risk assessment (educational tool).

Third-party and software supply chain risk assessment of the 2026 open-source compromise wave (Trivy, Bitwarden, Checkmarx → OpenAI/Vercel downstream). Full GRC workflow: methodology, risk register, NIST CSF 2.0 / ISO 27001 / SP 800-161 control mapping, TPRM program response, KRIs, and board briefing. OSFI B-10/B-13 context.