Sumber dan Bacaan Lanjut

Dikaji pada 18 Okt 2026. Piawaian berubah; semak semula versi bagi setiap kohort.

Piawaian teras yang digunakan dalam silibus ini

• OWASP Top 10:2025: https://top10.owasp.org/2025/
• OWASP Top 10 for Agentic Applications 2026: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/
• OWASP Top 10 for LLM Applications: https://genai.owasp.org/llm-top-10/
• Ringkasan senarai agentic dan prinsip "least agency / strong observability": https://lineation.ai/owasp-top-10-agentic/
• Metrik prestasi penghantaran perisian DORA (lima metrik): https://dora.dev/guides/dora-metrics/
• DORA 2025 State of AI-assisted Software Development: https://dora.dev/research/2025/dora-report/
• DORA AI Capabilities Model: https://dora.dev/ai/capabilities-model/
• IMDA Model AI Governance Framework for Agentic AI (kenyataan media, 22 Jan 2026): https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/press-releases/2026/new-model-ai-governance-framework-for-agentic-ai

Bukti dan kajian kes

• Veracode 2026 GenAI Code Security Report: veracode.com (blog, 28 Jul 2026)
• CVE-2025-48757 (Lovable RLS): https://nvd.nist.gov/vuln/detail/CVE-2025-48757
• Pemadaman pangkalan data production oleh ejen Replit (Fortune, Julai 2025): fortune.com (23 Jul 2025); catatan pengasas SaaStr, Jason Lemkin, sendiri di saastr.com

Bacaan yang disyorkan (karya klasik yang kekal relevan)

• Google, Site Reliability Engineering dan The Site Reliability Workbook (percuma di sre.google)
• Martin Kleppmann, Designing Data-Intensive Applications
• Michael Nygard, Release It! (corak ketahanan)
• Forsgren, Humble, Kim, Accelerate (asas penyelidikan DORA)
• The Twelve-Factor App (12factor.net)
• OWASP Cheat Sheet Series, OWASP ASVS, OWASP API Security Top 10
• Rangka kerja rantaian bekalan SLSA (slsa.dev)
• AWS Well-Architected Framework (enam tonggak: kecemerlangan operasi, keselamatan, kebolehpercayaan, kecekapan prestasi, pengoptimuman kos, kelestarian)
• Panduan PDPC tentang PDPA dan pengurusan pelanggaran data (pdpc.gov.sg)
• MAS Technology Risk Management Guidelines (mas.gov.sg)
• NIST AI RMF; ISO/IEC 42001; ISO/IEC 27001:2022