When Risk Has a 15-Year Service Life In traditional IT, “end of life” often means next quarter. In Intelligent Transportation Systems (ITS), end of life means after the asphalt gives up first. Ro...

Introduction Scope First — Because Everything Dies Without It Before touching a single configuration screen, define what this actually is: This is not an “Eramba implementation.” This is a cont...

Introduction When organizations talk about improving governance, risk, and compliance (GRC), the conversation often stalls before it even begins. Spreadsheets multiply, ownership becomes unclear,...

Introduction One of the most practical ways to understand AI security is to stop treating it as a cloud service and start treating it like infrastructure. Running a local LLM in a home lab forces...

Introduction AI has created a strange split in cybersecurity conversations. On one side, there’s real risk: data exposure, model misuse, and new attack surfaces. On the other, there’s hype: fears ...

I built this site to document real work, lessons learned, and practical security projects. Over the past several years, my career has evolved from general IT into focused cybersecurity work; inclu...