NIST Privacy Framework: Foundational Privacy Principles

The National Institute of Standards and Technology (NIST) has developed a comprehensive privacy framework that can help organizations assess and improve their privacy practices. The framework consists of three main components: the core, the profiles, and the implementation tiers. In this blog post, we will focus on the foundational privacy principles, which are the fundamental … Continue reading NIST Privacy Framework: Foundational Privacy Principles →

Threat Emulation Training: Where to Start

Written by: Sean D. Goodwin , CISA, QSA, PCIP, CISSP, CCSP, GSEC, GCIH, GCIA, GCWN, GCCC, GCUX, GCPM, GDAT, GSE Our recent blog posts have covered a variety of topics related to threat emulation, including: The benefits of threat emulation. The important factors that differentiate threat emulation from penetration testing. Understanding how to leverage these tests to implement controls … Continue reading Threat Emulation Training: Where to Start →

2021 in Review

Credit goes to James Clear for the formatting of this review. I read his post recapping his 2019, and thought this would be a good way to focus on my 2021. I started this post in Q1 2021 in an effort to capture the good and the bad throughout the year. The focus of this … Continue reading 2021 in Review →

2020 in Review

Credit goes to James Clear for the formatting of this review. I read his post recapping his 2019, and thought this would be a good way to focus on my 2020. I started this post in Q1 2020 in an effort to capture the good and the bad throughout the year, then promptly forgot about … Continue reading 2020 in Review →

Welcome to my blog!

I am starting this blog for a few reasons. The first of which is to have a venue to work on my own writing skills. The second is to share the knowledge I have gleaned to date, as well as sharing additional information as I come across it. I work as a computer security consultant … Continue reading Welcome to my blog! →