Laiba Waseem·19h agoWhat I Learned Implementing ISO 27001 for a Real ClientI recently implemented ISO 27001 for a client as their on-site (resident) implementer. No textbook or certification course fully prepares…
Sahar Hamdi·2d agoGRC is your organization’s GPSAuthor : Sahar Hamdi Expertise : Cybersecurity and IT Infrastructure
Saleem Yousaf·4d agoSTRIDE, made concrete: threat modelling you can actually doThreat modelling sounds abstract until you do it on something real. STRIDE gives you six lenses to hold up to a system, and most weaknesses…
Danilo Stojkovic·4d agoThe Infostealer That Hired an AI AnalystMost AI-risk conversations I sit in still sound the same. Will the model write malware? Will it help someone build a weapon? Does it refuse…
Riya Waghare·Oct 273,897 SBI Records on the Dark Web: How I Looked at It as a GRC StudentMy first blog: a real Indian data exposure, broken down through Governance, Risk and Compliance, and what it means for the people behind…
Onyinyechukwu Kene-Mbuba·Oct 26The Checkbox Trap: Designing Security Controls That Survive Operational PressureWalk into almost any organization preparing for an audit, and you will find a pristine, comprehensive set of policies. Every control is…
Stacey Enjeck·Oct 22GRC Terms Nigerian Businesses Mix Up: 10 NDPA Compliance Definitions ExplainedTen commonly confused NDPA and GRC terms, each explained in one line, from DPO vs DPCO to FCCPC vs NDPC.
Danilo Stojkovic·Oct 21The Day AI Switched Off the Internet: A Board-Level Read on PHP2ShellAn AI-assisted hunt found two critical PHP bugs. A leak cut the warning to 18 hours. Governments unplugged their own websites rather than…
Alisa Todorova·Oct 21AI Security Reading List 2026: OWASP Top 10 LLM & Agentic Apps, MITRE ATLAS, NIST AI RMF, EU AI ActTechnical and Governance, Risk, and Compliance (GRC) documents that you must know for AI Security, LLM Security & Agentic AI with resources.
Elizabeth Sesebor·Oct 17I Deployed Azure Firewall and Proved That Default Deny Actually WorksA hands-on cloud security lab: forcing outbound traffic through a firewall, allowing one website, and watching everything else get blocked
