Lee Siang Fong

404 Not Scott

Notes on AI, security and running IT

Plain-English guides for business owners, managers and IT teams in Malaysia and around the region. By Scott Lee Siang Fong.

  1. Data Is the Foundation of Enterprise AI

    Useful enterprise AI starts with reliable business data, context and access. A SenangAI perspective on turning scattered records into decisions you can trust.

    Updated 2026-11-05
  2. Project SAGE: Who Gives an AI Agent Authority to Act?

    Hong Kong’s Project SAGE puts AI agent governance in focus. A SenangAI perspective on permissions, evidence, human approval and accountability in business.

    Updated 2026-11-05
  3. Enterprise AI starts with the company’s data

    Why enterprise AI depends on reliable company data, business context and access controls, and why citations alone cannot make an answer safe to act on.

    Updated 2026-11-05
  4. What Enterprise AI Needs Before It Can Act

    Enterprise AI needs reliable context, clear authority, dependable execution and reviewed improvement. A practical framework for accountable business action.

    Updated 2026-11-04
  5. Goldman’s AI Restrictions: The Enterprise Lesson

    What Goldman Sachs’s reported AI coding restrictions reveal about corporate accountability, the cost of automation, and the principles guiding SenangAI.

    Updated 2026-11-04
  6. LLM Roadmap for Beginners: Build a Document Assistant

    Follow a beginner LLM roadmap by planning a small document assistant, learning retrieval and testing its answers before connecting real company data.

    Updated 2026-11-02
  7. AI Agent Approval Checklist for Business Workflows

    Plan AI agent permissions and human approvals with a practical checklist covering proposed actions, retries, audit records and recovery before launch.

    Updated 2026-11-01
  8. Five Records, a Quiet Promise, and Why SenangAI Was Born

    Looking after a family member in hospital, I found five records for one person. The quiet promise it led to, and why SenangAI was born.

    📌 Pinned · · 7 min read · AI, Data, Kognosys
  9. Malaysia's AI Governance Bill: What Businesses Need to Know

    A plain-English guide to Malaysia's proposed AI Governance Bill: who it covers, the five principles, the risk tiers, incident reporting and the AI sandbox.

    · 7 min read · AI, Malaysia, Policy, Governance
  10. SenangAI: What We're Building at Kognosys, and Why

    What SenangAI does: connects scattered records, flags conflicts and risks, traces root causes and suggests next steps, with people in control and data kept in-house.

    · 10 min read · AI, Sovereign AI, Kognosys
  11. What Is Sovereign AI? Malaysia's Push, Explained

    What sovereign AI means in plain English, why it matters, and what Malaysia is doing about it: ILMU, the RM2 billion sovereign cloud, AI Malaysia and new AI laws.

    · 8 min read · AI, Malaysia, Policy
  12. A $0 Tech Stack for Small Business: Free Tools and Limits

    A $0 tech stack for a small business: free email, website, CRM, invoicing, design and passwords, with each free plan's real limits stated plainly for 2026.

    · 5 min read · Business, Cloud, Tools
  13. Vector Databases Explained: Embeddings in Plain English

    Vector databases explained simply: what vectorised data and embeddings are, how similarity search works, when you need a vector database and how to choose one.

    · 4 min read · AI, Data
  14. AI Governance: A Practical Starter Guide for Businesses

    What AI governance means, the EU AI Act timeline, NIST AI RMF, ISO/IEC 42001 and Malaysia's AIGE guidelines, plus simple first steps for any business.

    · 6 min read · AI, Governance, Business
  15. Multimodal AI Explained: What It Means for Business

    Multimodal AI explained in plain English: what it is, how it handles text, images and audio together, real business uses, and the risks to plan for.

    · 4 min read · AI, Business
  16. AI Infrastructure Guide: Compute, Data, Cloud and Cost

    A plain guide to AI infrastructure: GPUs and compute, data pipelines, cloud vs on-prem vs hybrid, controlling cost, and what NVIDIA's Rubin platform is.

    · 6 min read · AI, Cloud, Business
  17. Tea App Breach (July 2025): What Happened and Lessons

    What the July 2025 Tea app breach exposed, how an unsecured storage bucket caused it, and the privacy lessons for any app that collects IDs or selfies.

    · 4 min read · Security, Privacy
  18. Starlink and Yahoo Mail Outages: Business Continuity Lessons

    What happened in the July 2025 Starlink and Yahoo Mail outages, and the practical business continuity steps any company can take to avoid being stuck.

    · 4 min read · Business, Resilience
  19. Immutable Backups: Your Best Defence Against Ransomware

    What immutable backups are, why ransomware attackers go after your backups first, and a simple 3-2-1-1-0 plan any small or mid-sized business can follow.

    · 5 min read · Security, Backup, Ransomware
  20. Cyberattack Response Plan for SMEs: A Practical Guide

    A simple cyberattack response plan for small and mid-sized businesses in Malaysia: what to prepare, the first hours, who to call, and PDPA reporting deadlines.

    · 6 min read · Security, Business, Malaysia
  21. AI and Cybersecurity: Defence, Attacks and Securing Your AI

    How AI helps security teams, how attackers misuse it, and how to secure your own chatbots and AI tools against prompt injection and data leaks.

    · 5 min read · AI, Security
  22. Zero Trust Security Explained Simply

    Zero trust security in plain English: what it means, the core principles from NIST and CISA, and a step-by-step way for a small or mid-sized firm to start.

    · 5 min read · Security, Business
  23. Serverless Computing Explained: When It Fits

    What serverless computing is, how it is billed, where it saves money and where it doesn't. A plain guide with real limits from AWS Lambda's own docs.

    · 5 min read · Cloud, Business
  24. Edge AI Explained: Running AI Close to the Data

    Edge AI runs AI models on local devices instead of the cloud. Learn how it works, when it beats the cloud, the trade-offs, and how to start a small pilot.

    · 5 min read · AI, Cloud, Business
  25. Cloud-Native Security Best Practices: A Plain Guide

    Practical cloud-native security best practices for containers, Kubernetes, secrets, pipelines and monitoring, explained for busy teams in Southeast Asia.

    · 4 min read · Cloud, Security
  26. AI in DevOps: How to Use It Without Breaking Things

    Where AI genuinely helps in DevOps, what the 2025 DORA research found about speed and stability, and the guardrails to put in place before you rely on it.

    · 4 min read · AI, DevOps
  27. The 16 Billion Password Leak: What It Really Was

    The June 2025 '16 billion passwords' leak was mostly old infostealer logs, not a new hack. Here is what happened, the real risk, and what to do.

    · 4 min read · Security, Passwords
  28. What Is a Data Breach? A Plain Guide for Businesses

    What a data breach is, how breaches happen, what they cost, the PDPA rules Malaysian firms must follow, and simple steps to prevent and respond to one.

    · 6 min read · Security, Business, PDPA
  29. Enterprise AI Roadmap: A Practical Pilot Checklist

    Build an enterprise AI roadmap with clear owners, a data checklist, pilot measures and launch gates. Includes a practical worksheet for your first project.

    · 6 min read · AI, Business, Strategy
  30. What Is AI Reasoning? Reasoning Models Explained

    AI reasoning models think step by step before answering. Learn how they work, what the evidence shows, when to switch reasoning on, and when it just costs more.

    · 5 min read · AI, Business
  31. FMCG Mobile Apps: How to Get People Opening Them Daily

    How to build FMCG mobile apps people actually open: loyalty that is easy to earn, useful daily features, respectful push notifications and PDPA-safe data use.

    · 5 min read · Mobile, Business, Marketing
  32. Vertical vs Horizontal LLMs: Which Does Your Business Need?

    Horizontal LLMs are generalists; vertical LLMs are tuned for one industry. Learn the trade-offs, when each makes sense, and why most firms should start general.

    · 5 min read · AI, Business
  33. Observability vs Monitoring: What's the Difference?

    Monitoring tells you something is wrong. Observability helps you find out why. A plain guide, plus data observability for teams that rely on dashboards.

    · 5 min read · Cloud, DevOps, Data
  34. RAG vs AI Agents vs Agentic RAG: The Plain Difference

    RAG looks things up, AI agents take actions, agentic RAG plans its own searches. Learn the difference, see business examples, and pick the right one.

    · 5 min read · AI, Business
  35. AI Agent vs Chatbot: What's the Difference for Business?

    A chatbot answers questions. An AI agent plans steps and uses tools to finish a task. See the difference, real examples, and how to start agentic workflows.

    · 5 min read · AI, Business, Automation