Pinned Loading

1. supply-chain-compromise supply-chain-compromise Public

   Third-party and software supply chain risk assessment of the 2026 open-source compromise wave (Trivy, Bitwarden, Checkmarx → OpenAI/Vercel downstream). Full GRC workflow: methodology, risk register…

2. ISO27001-information-security-gap-analysis-grc-risk-management-compliance-cybersecurity ISO27001-information-security-gap-analysis-grc-risk-management-compliance-cybersecurity Public

   ISO/IEC 27001 gap analysis toolkit — maps control deficiencies, risk ratings, and remediation priorities for SMB environments

   1

3. Ticket-Lifecycle-Management Ticket-Lifecycle-Management Public

   End-to-end IT ticket lifecycle framework — covers intake, triage, escalation, resolution, and closure for security and helpdesk teams

   1

4. NIST-CSF-GRC-Portfolio NIST-CSF-GRC-Portfolio Public

   Applied NIST Cybersecurity Framework portfolio — documenting Identify, Protect, Detect, Respond, and Recover controls with real-world examples

   1

5. User-lifecycle-management--IAM User-lifecycle-management--IAM Public

   User lifecyclIdentity and access management (IAM) framework — covers user onboarding, role assignment, access reviews, and secure offboardinge management

   1

6. Vulnerability-management-SOP-with-severity-based-SLA-tiers-RACI-and-a-worked-CVSS-10.0-triage Vulnerability-management-SOP-with-severity-based-SLA-tiers-RACI-and-a-worked-CVSS-10.0-triage Public

   Vulnerability management SOP with severity SLA tiers and a worked CVSS 10.0 triage example, mapped to NIST 800-40, CSF 2.0, and ISO 27001.