Posts

My thoughts and ideas

  • RMF Prepare

    NIST Risk Management Framework

    RMF Prepare

    This is the series of articles to use as a study guide for the (ISC)2 CGRC exam. In this article, we will discuss the Prepare steps in the Risk Management Framework.

    Organization-level Tasks

    • P-1 – Risk Management Roles
    • P-2 – Risk Management Strategy
    • P-3 – Organization...
  • Governance Risk and Compliance - Risk Management Framework

    CGRC and the NIST Risk Management Framework

    RMF and other standards for the CGRC exam

    This is the first of a series of articles to use as a study guide for the (ISC)2 CGRC exam.

    Primary Roles for Risk Management

    • Authorizing Official (AO)
    • AO DR – can perform Authorizing tasks EXCEPT signing...
  • Architecting a Zero Trust Framework in Azure

    Azure Spring Clean 2023

    Architecting a Zero Trust Framework in Azure

    #AzureSpringClean, #AzureFamily, #CloudFamily, #AZOps

    In this article, you will be provided with guidance toward architecting a Zero Trust Framework within your Azure infrastructure. This will include areas of focus for identity, networking, devices, applications, and data for a defense in depth security design....

  • Architecting an AWS Zero Trust Framework

    Architecting an AWS Zero Trust Framework

    In this article, you will be provided with guidance toward architecting a Zero Trust Framework within your Amazon Web Services (AWS) infrastructure. This will include areas of focus for identity, networking, devices, applications, and data for a defense in depth security design. This article will close with a case study example of how...