David Uhlmann: Articles https://daviduhlmann.cloud/blog/ Articles on Microsoft Business Applications, AI governance, security and European regulation. en Tue, 13 Oct 2026 00:00:00 GMT Why Companies Say They Want Secure IT Solutions, But Actually Do Not Want Them https://daviduhlmann.cloud/blog/why-companies-do-not-want-security/ https://daviduhlmann.cloud/blog/why-companies-do-not-want-security/ Tue, 13 Oct 2026 00:00:00 GMT The real-life IT project paradox: contrasting paper compliance (ISO 27001) with factory-floor execution debt, over-privileged non-human identities, and AI risk exposure. Security The Infrastructure Illusion: Why Low-Code-No-Code, Public Cloud and 'Rented Compliance' Are Failing the Enterprise https://daviduhlmann.cloud/blog/the-infrastructure-illusion/ https://daviduhlmann.cloud/blog/the-infrastructure-illusion/ Tue, 06 Oct 2026 00:00:00 GMT How abstraction masks distributed system complexity, creates compliance blind spots under DORA/CRA, and accumulates compounding technical debt. Architecture We Know the Cyber Risk. So Why Don't We Act? https://daviduhlmann.cloud/blog/we-know-the-cyber-risk-so-why-dont-we-act/ https://daviduhlmann.cloud/blog/we-know-the-cyber-risk-so-why-dont-we-act/ Sat, 12 Sep 2026 00:00:00 GMT Analyzing psychological distance, cognitive biases, and organizational incentives behind delayed cybersecurity investments under NIS2. Governance Still Optimizing Your RAG for Agents? LLM Wikis Might Be Here to Stay (for Now) https://daviduhlmann.cloud/blog/llm-wikis-vs-rag-for-agents/ https://daviduhlmann.cloud/blog/llm-wikis-vs-rag-for-agents/ Sat, 25 Jul 2026 00:00:00 GMT Where Retrieval-Augmented Generation falls short for AI agents, how Andrej Karpathy's LLM Wiki idea synthesizes knowledge once instead of at every query, and the open questions that remain. Architecture AI Success Starts Before the First Copilot Is Built - How technical implementation companies can win in the AI race https://daviduhlmann.cloud/blog/ai-success-starts-before-the-first-copilot/ https://daviduhlmann.cloud/blog/ai-success-starts-before-the-first-copilot/ Tue, 07 Jul 2026 00:00:00 GMT Why AI success requires strategy, governance, business value and advisory before technical implementation begins. Strategy How to Use a Local LLM in VS Code https://daviduhlmann.cloud/blog/local-llm-in-vs-code/ https://daviduhlmann.cloud/blog/local-llm-in-vs-code/ Wed, 10 Jun 2026 00:00:00 GMT Set up Ollama, a local model and the Continue extension for private, offline AI coding assistance in VS Code, no cloud service or massive GPU required. Engineering Architecting the Exit: How to Avoid AI Vendor Lock-In https://daviduhlmann.cloud/blog/architecting-the-exit-ai-vendor-lock-in/ https://daviduhlmann.cloud/blog/architecting-the-exit-ai-vendor-lock-in/ Wed, 03 Jun 2026 00:00:00 GMT Retaining institutional intelligence through decision telemetry logging, manual SOP drills, contractually secured fine-tuning data, and deterministic AI contracts. Strategy The Hidden GDPR Problem in Enterprise AI That Everyone Misses https://daviduhlmann.cloud/blog/the-hidden-gdpr-problem-in-enterprise-ai/ https://daviduhlmann.cloud/blog/the-hidden-gdpr-problem-in-enterprise-ai/ Wed, 13 May 2026 00:00:00 GMT Why processing personal data through internal AI systems needs purpose compatibility, a valid lawful basis under Art. 6 GDPR, and a DPIA under Art. 35 before processing starts. Compliance