Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
The reason your finding gets fixed is a GRC person turned it into a risk the business had to own.
What GRC Actually Is
The reason your finding gets fixed is a GRC person turned it into a risk the business had to own.
Risk Management
You cannot fix everything, so risk management is how you decide what to fix first without guessing.
Security Frameworks
Three frameworks, three jobs. Pick the wrong one and you burn a year building the wrong binder.
Audits and Compliance
PCI, HIPAA, SOC 2. An audit is not about being secure, it is about proving you did what you said.
Policies People Actually Follow
A policy nobody reads is worse than none. It creates the paper trail that says you knew and did nothing.