Ali Hartigan·Oct 26The LumiPay Files #0: Why I’m Learning GRC by Playing Both SidesA fictional fintech, an ISO 27001 case study, and how I’m learning to be both implementer and auditor
Pruthyush A S·Oct 21When a Compensating Control Expires: Building an Assurance Expiry Engine for IEC 62443A student project exploring whether assurance expiry and reassessment can be automated without overclaiming compliance.
Mércio Manjor·Oct 16How Wazuh Supports Continuous Compliance and GRCFrom Point-in-Time Audits to Continuous Assurance
Satwik Malviya·Oct 5ISO/IEC 27001 Explained Simply: Part 1 - What Is It and Why Does It Matter?Not long ago, while learning about GRC, I kept running into one term: ISO/IEC 27001. Job descriptions mentioned it, company websites...
Ekaette Essien·Sep 28The fundamentals of PCI DSS and why payment card security mattersThe Payment Card Industry Data Security Standard (PCI DSS) is a global security standard developed to protect payment card data and reduce…
Muhammad Ilyas·Sep 20What Is SDK Governance, and Why "No Known CVEs" Doesn’t Mean "Safe"The False Comfort of a Green Scan
Pearl Olaoluwa Aina·Aug 24Returning to Cybersecurity: Building My First Banking GRC Risk RegisterAfter working in digital marketing for three years, I decided to return to my original path: cybersecurity and Governance, Risk, and…
Erebus·Aug 12Can LLMs do ISO compliance gap assessment?Gap assessment is a large part of the day job in governance, risk and compliance. You take an organisation’s policies, hold them against a…
Mércio Manjor·Aug 12Beyond Vendor Lock-In: Why Wazuh Is a Strategic Enabler of Digital SovereigntyAn executive perspective for CISOs, CIOs and risk leaders navigating digital transformation in emerging markets
Prashant Akhawat·Jun 27Provable or UnsellableHow AI Governance Became the License to Operate in Life Sciences
