GRC / Security / Automation
Making the complex a little easier.
Security work is complicated enough. I help teams turn frameworks, findings, and infrastructure into systems people can actually use.
Practical security programs built for the space between a policy document and a Tuesday morning.
01GovernanceNIST · FedRAMP · CMMC · HIPAA
02AutomationPython · AI-assisted GRC · CVSS
03AssuranceAssessment · Monitoring · Hardening
A useful point of view
Good security gives good work room to move.
From FedRAMP assessments to small home-lab experiments, I like the work that makes invisible risk easier to see and difficult systems easier to operate.
Read the notes