- Published on
Standards bodies like NIST, the ACSC, and GCHQ have dual offensive/defensive mandates and structural conflicts of interest. Use their guidance, but test it against your own threat model rather than deferring to authority.
Latest
A Next.js blog by Mark Williams
- Published on
Privileged Access Management (Part 2): Discovery & Current-State Assessment- Published on
Privileged Access Management (Part 1): Introduction & Capabilities- Published on
SMS OTPs: Bad for Security, Architecture, Engineering, and Call Centres?- Published on
Why are CIAM and Workforce IAM Completely Different?