Lee Siang Fong

404 Not Scott

Notes on AI, security and running IT

Plain-English guides for business owners, managers and IT teams in Malaysia and around the region. By Scott Lee Siang Fong.

  1. SenangAI: What We're Building at Kognosys, and Why

    Why I started Kognosys and what SenangAI does: governed AI with Enterprise Memory, permission-aware answers, model choice and an audit trail.

    · 5 min read · AI, Sovereign AI, Kognosys
  2. What Is Sovereign AI? Malaysia's Push, Explained

    What sovereign AI means in plain English, why it matters, and what Malaysia is doing about it: ILMU, the RM2 billion sovereign cloud, AI Malaysia and new AI laws.

    · 8 min read · AI, Malaysia, Policy
  3. A $0 Tech Stack for Small Business: Free Tools and Limits

    A $0 tech stack for a small business: free email, website, CRM, invoicing, design and passwords, with each free plan's real limits stated plainly for 2026.

    · 5 min read · Business, Cloud, Tools
  4. Vector Databases Explained: Embeddings in Plain English

    Vector databases explained simply: what vectorised data and embeddings are, how similarity search works, when you need a vector database and how to choose one.

    · 4 min read · AI, Data
  5. AI Governance: A Practical Starter Guide for Businesses

    What AI governance means, the EU AI Act timeline, NIST AI RMF, ISO/IEC 42001 and Malaysia's AIGE guidelines, plus simple first steps for any business.

    · 6 min read · AI, Governance, Business
  6. Multimodal AI Explained: What It Means for Business

    Multimodal AI explained in plain English: what it is, how it handles text, images and audio together, real business uses, and the risks to plan for.

    · 4 min read · AI, Business
  7. AI Infrastructure Guide: Compute, Data, Cloud and Cost

    A plain guide to AI infrastructure: GPUs and compute, data pipelines, cloud vs on-prem vs hybrid, controlling cost, and what NVIDIA's Rubin platform is.

    · 6 min read · AI, Cloud, Business
  8. Tea App Breach (July 2025): What Happened and Lessons

    What the July 2025 Tea app breach exposed, how an unsecured storage bucket caused it, and the privacy lessons for any app that collects IDs or selfies.

    · 4 min read · Security, Privacy
  9. Starlink and Yahoo Mail Outages: Business Continuity Lessons

    What happened in the July 2025 Starlink and Yahoo Mail outages, and the practical business continuity steps any company can take to avoid being stuck.

    · 4 min read · Business, Resilience
  10. Immutable Backups: Your Best Defence Against Ransomware

    What immutable backups are, why ransomware attackers go after your backups first, and a simple 3-2-1-1-0 plan any small or mid-sized business can follow.

    · 5 min read · Security, Backup, Ransomware
  11. Cyberattack Response Plan for SMEs: A Practical Guide

    A simple cyberattack response plan for small and mid-sized businesses in Malaysia: what to prepare, the first hours, who to call, and PDPA reporting deadlines.

    · 6 min read · Security, Business, Malaysia
  12. AI and Cybersecurity: Defence, Attacks and Securing Your AI

    How AI helps security teams, how attackers misuse it, and how to secure your own chatbots and AI tools against prompt injection and data leaks.

    · 5 min read · AI, Security
  13. Zero Trust Security Explained Simply

    Zero trust security in plain English: what it means, the core principles from NIST and CISA, and a step-by-step way for a small or mid-sized firm to start.

    · 5 min read · Security, Business
  14. Serverless Computing Explained: When It Fits

    What serverless computing is, how it is billed, where it saves money and where it doesn't. A plain guide with real limits from AWS Lambda's own docs.

    · 5 min read · Cloud, Business
  15. Edge AI Explained: Running AI Close to the Data

    Edge AI runs AI models on local devices instead of the cloud. Learn how it works, when it beats the cloud, the trade-offs, and how to start a small pilot.

    · 5 min read · AI, Cloud, Business
  16. Cloud-Native Security Best Practices: A Plain Guide

    Practical cloud-native security best practices for containers, Kubernetes, secrets, pipelines and monitoring, explained for busy teams in Southeast Asia.

    · 4 min read · Cloud, Security
  17. AI in DevOps: How to Use It Without Breaking Things

    Where AI genuinely helps in DevOps, what the 2025 DORA research found about speed and stability, and the guardrails to put in place before you rely on it.

    · 4 min read · AI, DevOps
  18. The 16 Billion Password Leak: What It Really Was

    The June 2025 '16 billion passwords' leak was mostly old infostealer logs, not a new hack. Here is what happened, the real risk, and what to do.

    · 4 min read · Security, Passwords
  19. What Is a Data Breach? A Plain Guide for Businesses

    What a data breach is, how breaches happen, what they cost, the PDPA rules Malaysian firms must follow, and simple steps to prevent and respond to one.

    · 6 min read · Security, Business, PDPA
  20. LLM Roadmap for Beginners: A Practical Step-by-Step Path

    A plain, step-by-step LLM roadmap for beginners: the basics, prompting, APIs, RAG, simple agents and safety, with free resources and what to build at each stage.

    · 6 min read · AI, Learning
  21. Enterprise AI Roadmap: 7 Steps From Pilot to Production

    A plain, step-by-step enterprise AI roadmap: pick the right problem, fix your data, run a pilot, add governance, go live and keep AI working after launch.

    · 6 min read · AI, Business, Strategy
  22. What Is AI Reasoning? Reasoning Models Explained

    AI reasoning models think step by step before answering. Learn how they work, what the evidence shows, when to switch reasoning on, and when it just costs more.

    · 5 min read · AI, Business
  23. FMCG Mobile Apps: How to Get People Opening Them Daily

    How to build FMCG mobile apps people actually open: loyalty that is easy to earn, useful daily features, respectful push notifications and PDPA-safe data use.

    · 5 min read · Mobile, Business, Marketing
  24. Vertical vs Horizontal LLMs: Which Does Your Business Need?

    Horizontal LLMs are generalists; vertical LLMs are tuned for one industry. Learn the trade-offs, when each makes sense, and why most firms should start general.

    · 5 min read · AI, Business
  25. Observability vs Monitoring: What's the Difference?

    Monitoring tells you something is wrong. Observability helps you find out why. A plain guide, plus data observability for teams that rely on dashboards.

    · 5 min read · Cloud, DevOps, Data
  26. RAG vs AI Agents vs Agentic RAG: The Plain Difference

    RAG looks things up, AI agents take actions, agentic RAG plans its own searches. Learn the difference, see business examples, and pick the right one.

    · 5 min read · AI, Business
  27. AI Agent vs Chatbot: What's the Difference for Business?

    A chatbot answers questions. An AI agent plans steps and uses tools to finish a task. See the difference, real examples, and how to start agentic workflows.

    · 5 min read · AI, Business, Automation