Inside the NIST CSF Assessment: Assessment Types, Scoring, and the Actual Workflow
Self vs. third-party assessments, how 106 subcategory scores roll up into one number, and the eight-step workflow behind it all.
Blog
Notes on cybersecurity, GRC, labs and what I'm learning. Browse by tag or category.
Recent Posts
Building My First NIST CSF 2.0 Gap Assessment: What Actually Goes Into One
Maturity tiers, asset inventories, risk registers and remediation roadmaps, explained through a fictional wealth management firm.
Why I Switched Bootcamps: A Lesson in Learning What You Actually Need
How comparing syllabuses like term sheets led me to the right program, and to a simple formula that reframed risk for me.
From Law School to Compliance to Cybersecurity: How I Got Here
Ten years in law and finance didn’t derail this path. It built the foundation for it.