Our Insights & Articles
In-depth technology and global digital strategy from the Superdev expert team. Driving your organization towards new standards of world-class innovation.
In-depth technology and global digital strategy from the Superdev expert team. Driving your organization towards new standards of world-class innovation.
Accepting a System Built With AI-Written Code: What to Put in the TOR and What Evidence to Ask For
A system owner cannot see which lines an AI wrote, so acceptance has to test the running system and the delivery evidence. This article sets out the TOR clauses and the handover evidence worth asking for.
Customizing ERP Without Turning Every Upgrade Into a New Project
Separate configuration from customization, see how SAP and Odoo document their extension routes in pages we could open, and get questions for reviewing each custom request plus the clauses that belong in a TOR.
ERP Master Data: Who Owns Item, Vendor and Customer Records Before Cutover
Master data is what an ERP runs on every day. This article covers how to name an owner for each data type, cleanse records in the source system, write validation rules alongside conversion rules, and rehearse loads until results settle, plus what to ask your developer to show before cutover.
Leaked Secrets in Repos and Pipelines: Detect, Rotate and What to Ask For at Handover
API keys, database passwords and tokens can end up in Git, chat, tickets and Docker images. This article summarizes OWASP and GitHub guidance and turns it into what a buyer can ask a developer to deliver, and the order to act in on the day a key leaks.
ERP Access and Segregation of Duties: Can One Person Create a Vendor, Approve and Pay?
Can one account add a vendor, raise a purchase order, receive goods and release payment? This article reads NIST control AC-5 and the ACFE fraud report, then turns them into a one-page role matrix, an access review routine and a handover checklist for ERP buyers.
Backups Ransomware Cannot Reach: Locked Copies, Separate Permissions and Restore Drills
If an attacker deletes or encrypts the backups along with the main system, a restore drill does not help. This article reads CISA's guidance and turns it into questions an owner can ask a developer to demonstrate at handover.
Thailand's Draft AI Act: Five Questions to Ask Developers Before You Sign an AI System Contract
ETDA's draft AI Act, as reported by the press, has seven chapters. This article turns that structure into five questions a buyer can put to a developer today, plus contract clauses tied to what the system can do rather than to article numbers.
The EU Delayed Its High-Risk AI Rules, but Not All of Them: Build an AI Feature Inventory Now
Regulation (EU) 2026/1744 postponed the high-risk obligations of the EU AI Act, according to secondary sources, but not the transparency duties. This article separates what was deferred from what was not and explains an AI feature inventory an IT team can build now.
Reading Thailand's PDPC Fines as Three Duties, and the Evidence Your System Must Be Able to Show
Administrative fines by Thailand's Personal Data Protection Committee, as reported by the press, point to duties not performed rather than hacking technique. This article turns the duties under sections 41(2), 37(1) and 37(4) into evidence an IT team can prepare.
NIST IR 8547 Sets 2030 and 2035 Cryptography Dates: What a Systems Team Can Inventory Today
The final NIST IR 8547 says RSA and ECC will be deprecated after 2030 and disallowed after 2035. This article separates who is bound and explains a one-page cryptography inventory a systems team can build itself, without buying a new product.
What Thailand's 2.12 out of 4 Digital Readiness Score Tells System Buyers, and What It Does Not
The Thailand Digital Outlook 2569 survey by the Digital Economy and Society Commission reports an average of 2.12 out of 4 and AI use at 21.18 percent. This article explains what each figure can and cannot tell you, and turns them into a five-question internal check.
Phantom Costs in Fuel Price Formulas and IT Budgets: Checking Assumptions Nobody Has Compared With Reality
Thailand's fuel price formula has just had assumed costs removed, and the same pattern sits in IT budgets. This article covers how to check lines that rest on assumptions, an assumption register, contracts that adjust to actuals, and when not to cut a reserve.