Overview
Effective security requires more than technical controls. Organizations need documented processes, defined security requirements, risk evaluation methods, and governance practices that support informed decision-making and long-term operational resilience.
This section demonstrates applied governance, risk, and compliance practices through security assessments, policy development, risk analysis, and framework-aligned documentation. The work focuses on translating technical security concerns into structured decisions that help organizations reduce risk, prioritize improvements, and maintain consistent security practices.
Projects apply industry-recognized concepts including NIST security frameworks, risk management methodologies, access control principles, threat modeling, and security documentation standards. Each artifact demonstrates the ability to analyze security requirements, evaluate risk exposure, and communicate technical findings in a format that supports operational and business decisions.
Lab Distribution Summary
| Category | Labs |
|---|---|
| Technical Communication & Reporting Standards | 4 |
| Risk Management & Security Frameworks | 5 |
| Threat Modeling & Defensive Strategy | 2 |
| Lab Demonstration | 0 |
| Total Governance Documents | 11 |
Governance, Risk, and Compliance (GRC) Documentation
馃搼 Technical Reporting & Communication
Governance, Risk & Compliance: Cybersecurity Assessment & Reporting Standards
Implementation of standardized reporting frameworks, including revision history and executive summaries for formal assessments.
Skills: Professional Reporting 路 Documentation Standards
Request Access
Enhancing Writing Quality with Quillbot
Utilizing AI-assisted tools to refine sentence structure and maintain professional tone in technical documentation.
Skills: Technical Communication 路 Professional Writing
Request Access
Improving Readability Using Hemingway
Optimizing technical reports for stakeholder readability by reducing complexity and ensuring clear security insights.
Skills: Readability Optimization 路 Stakeholder Communication
Request Access
Governance, Risk & Compliance: Security Report Framework
A structured framework for producing executive-ready security reports that translate technical findings into clear business impact.
Skills: Executive Reporting 路 Technical Communication 路 GRC Reporting
馃摐 Risk Management & Security Frameworks
Governance, Risk & Compliance: Least Privilege (NIST SP 800-53 AC-6)
Using least privilege, RBAC, and access controls to reduce risk and protect systems from unauthorized access.
Skills: Access Control 路 RBAC 路 Least Privilege Enforcement
Governance, Risk & Compliance: Risk Assessment (NIST SP 800-30 Rev. 1)
Applying a structured risk assessment process to identify assets, threats, and vulnerabilities, and prioritize risk using a defined scoring method.
Skills: Risk Assessment 路 Threat Analysis 路 Vulnerability Identification
Governance, Risk & Compliance: Bank Risk Register Analysis
Risk register assessment of a financial institution identifying and prioritizing operational and technical risks using a structured risk matrix aligned with NIST SP 800-30.
Skills: Risk Assessment 路 Risk Register 路 NIST SP 800-30 路 Security Control Evaluation
Governance, Risk & Compliance: Front-Running in CeFi vs DeFi
Examined front-running risks in CeFi vs DeFi and XRPL mitigation strategies.
Skills: Risk Analysis 路 Financial Security Concepts 路 Blockchain Security
Request Access
Governance, Risk & Compliance: BYOD Policy & Agreement
A NIST-aligned policy framework to secure personal device usage within corporate networks, including employee legal agreements.
Skills: Policy Writing 路 Security Governance 路 NIST Alignment
Security Strategy & Threat Analysis
馃搱 Enterprise Strategy & Threat Analysis
Cyber Kill Chain Model and MITRE ATT&CK Research
Strategic analysis of the Cyber Kill Chain and MITRE ATT&CK frameworks to map attacker behaviors and develop integrated defensive strategies for organizational resilience.
Skills: Threat Modeling 路 MITRE ATT&CK 路 Risk Analysis
Request Access
Governance, Risk & Compliance: BYOD in Organizations: Security, Challenges, and Strategies
Research and analysis examining the security risks, technical challenges, and mitigation strategies for BYOD environments.
Skills: Strategic Analysis 路 BYOD Security 路 Threat Modeling
Continue Exploring
Security decisions require more than individual controls. Effective organizations combine governance, risk management, technical security operations, and operational resilience to maintain a secure and reliable environment.
The projects presented in this section represent publicly available examples of governance and risk work. Additional assessments, policy artifacts, and supporting documentation are maintained privately in accordance with training provider publishing requirements.
Continue exploring the next section to examine how OSINT investigation techniques support information gathering, threat intelligence, and security analysis.