Security Compliance

Assess cybersecurity supply chain risk using NIST SP 800-161 controls and vendor scoring. Build vendor inventories, calculate portfolio risk, and prioritize remediation.

Learn to build STRIDE threat models with DREAD scoring for application security risk assessment. Step-by-step guide with examples and prioritization.

Design firewall rulesets using least privilege, test rule logic before deployment, and manage ongoing rule reviews for PCI-DSS compliance.

Compare hot, warm, cold, and cloud DR sites with RTO/RPO alignment, total cost of ownership analysis, and DR testing strategies.

Select the right Clear, Purge, or Destroy sanitization method per NIST SP 800-88 for HDD, SSD, tape, and optical media. Includes verification and compliance guidance.

Calculate Single Loss Expectancy and Annualized Loss Expectancy for risk-based security decisions. Step-by-step formulas, worked examples, and ROI analysis.

Create a data classification policy with government and commercial schemes, handling rules, compliance overlays, and labeling standards for enterprise data protection.

Design secure wireless networks with WPA3, 802.1X authentication, network segmentation, rogue AP detection, and wireless IDS/IPS controls.

Detect and prevent database inference and aggregation attacks using query restriction, noise injection, polyinstantiation, and audit techniques.

Evaluate biometric authentication using FAR, FRR, and CER metrics to select the right modality and operating threshold for your environment.

Determine GDPR controller and processor roles, map Article 30 records of processing activities, and calculate data retention periods for full GDPR compliance.

Design physical security controls using CPTED principles including security zones, barriers, surveillance, fire suppression, and environmental controls.

Scope penetration tests with methodology selection, target definition, effort estimation, rules of engagement, and SOW generation guidance.

Compare Bell-LaPadula, Biba, Clark-Wilson, and Brewer-Nash formal security models to find the right fit for your organizational requirements.

Compare SAML, OpenID Connect, OAuth 2.0, and Kerberos for enterprise federated identity and SSO implementations with decision criteria.

Compare ECB, CBC, CTR, and GCM block cipher modes with detailed security analysis and practical selection guidance for FIPS compliance.