Compliance · August 2025
Navigating the FedRAMP 20x landscape
An exploration of changes in the FedRAMP authorization process and what they mean for cloud service providers building durable programs.
Read articleNotes from the field
Writing about the work.
Ideas on compliance, security programs, and the practical automation that keeps them moving.
Automation · July 2025
Automating NIST SP 800-53 control mapping with Python
How Python and basic LLM integration can streamline the work of connecting vulnerabilities, evidence, and the controls meant to address them.
Read article