GRC 10
- From Pipeline Findings to a Risk Register
- SOC 2 vs ISO 27001: What's Actually Different
- SOC 2 as Code: Automating Evidence Collection for a SaaS Startup
- CIP in a Virtual World: Categorizing the Lab under FERC Order 919
- GRC-as-Code: Automating CIP-010 Baselines and Evidence
- Watching the Inside: CIP-015 INSM with Zeek and Suricata
- Drawing the Perimeter: ESP, EAP, and Remote Access under CIP-005
- Speaking the Grid's Language: DNP3 on the Wire
- Grid Physics from Scratch with pandapower
- Why I Built a Fake Power Grid to Learn NERC CIP