Sourced artificial intelligence and software context
Models, products, and production services: Oracle Security
The City of San Jose identifies artificial intelligence as a priority growth sector and includes AI training and job-matching programs in its fiscal year 2025 to 2026 economic plan. Translate the operating setting into roles, privileges, data access, duty separation, service accounts, and sensitive transactions. Ask how users complete assigned work under the proposed controls. AI product work can join source data, models, application code, evaluation, user feedback, cost controls, access rules, and production support under separate owners.
Evidence to request: Use an access-design exercise with job duties, application roles, data scope, conflicts, service accounts, and approval owners. Define the user decision, model boundary, source data, evaluation set, deployment path, access control, cost target, failure response, and approving product owner.
Sourced semiconductors and advanced manufacturing context
Engineering, fabrication, and supply controls: Oracle Security
A July 2025 City of San Jose economic-development release names advanced manufacturing and semiconductors among the industries the city plans to attract, retain, and grow. Define joiner, mover, leaver, request, approval, provisioning, review, and removal flows across Oracle applications and identity services. Require evidence from connectors, workflows, logs, and exception handling. Semiconductor and manufacturing programs may connect product definitions, equipment, process recipes, production schedules, quality results, suppliers, inventory, maintenance, and cost records.
Evidence to request: Review an identity or provisioning defect with source identity, target account, logs, correction, retest, and user impact. Set the design or plant boundary, product revision, process control, equipment interface, traceability unit, quality release, supplier handoff, change window, and support owner.
Sourced data centers and energy infrastructure context
Capacity, continuity, and facility operations: Oracle Security
San Jose's July 2026 large energy-use project page distinguishes data centers from research laboratories, advanced manufacturing sites, electric-vehicle charging hubs, and other power-intensive facilities. Set audit and release ownership. Candidates should explain conflict analysis, role redesign, migration, population testing, evidence retention, emergency access, and follow-up review. These facilities can combine power, cooling, networks, physical security, capacity, asset maintenance, environmental controls, backup systems, and tenant or workload commitments.
Evidence to request: Ask for an audit finding or application release the consultant handled, including analysis, configuration, population testing, evidence, and closure. Name the facility and workload boundary, capacity unit, power and cooling dependencies, availability target, access model, maintenance path, recovery test, and change authority.