Jennifer Udeh·Oct 13You Know, Uhm… What Happens When Data Science Meets Cybersecurity GRC?Exploring how machine learning could make security compliance easier, one experiment at a time.
Jennifer Udeh·Oct 11You Know, Uhm… What Happens When Data Science Meets Cybersecurity GRC?Exploring how machine learning could make security compliance easier, one experiment at a time.
Walter Gomez·Sep 29Cómo apliqué un Gap Analysis de ciberseguridad a un banco ficticio guatemalteco (y qué aprendi del…Un ejercicio de aplicación del NIST CSF 2.0 e ISO/IEC 27001:2022 a un caso de estudio construido con datos reales del mercado. No se un…
Tim McAllister·Sep 22Beyond the OT isolation assumptionWhat Forescout’s segmentation findings and NIST’s new OT security draft mean for architecture, device trust, and safe recovery.
Tom Wechsler·Sep 17Sensitivity Labels Are Not Metadata. They Are Access Control.Why most label deployments disappoint, how encryption, rights, and markings actually work together, and what it takes to ship labels that…
abbegail lopez·Sep 16Implementing Controls for Institutional Assets1. What cybersecurity controls should be implemented to protect the university’s knowledge assets?
Russell "Dusty" Broad·Aug 21Auditing My Home Network Against NIST CSF 2.0: A Hands-On Guide to Practical Risk ManagementHow I turned my own Wi-Fi router into a GRC lab and what it taught me about risk management that no textbook could.
Lukasz | RiskASM·Jul 22NIST CSF 2.0 Cybersecurity Risk Assessment: A Plain-English GuideHow small teams can use Govern, Identify, Protect, Detect, Respond, and Recover to organize cybersecurity risk without turning the…
InHarmonious PinnaclebyJose Spena·Apr 25The Framework That Cannot Save ItselfFive Failure Modes Inside the NIST Cyber AI Profile and the Operating Model Redesign the Industry Refuses to Have
