Risk & resilience
Connect security decisions to business risk, accountability, and resilience.
Account Access Removal
Account access removal disrupts legitimate users by changing, deleting, or restricting their identities.
Asset inventories
Know what exists, who owns it, and why it matters.
Backups and restore testing
Design recoverable backups around independent failure boundaries, required keys, restore objectives, and realistic service validation.
Business continuity
Keep critical activities functioning through disruption.
Business impact analysis
Learn what disruption does to the organization and which services matter first.
Compliance and assurance
Demonstrate that applicable requirements are met, while managing broader risk.
Compliance evidence
Show the control operated over the relevant scope and period.
Control mapping and gap analysis
Connect requirements to implemented measures and make gaps explicit.
Data classification
Match handling to sensitivity, business value, and obligations.
Data Destruction
Data destruction intentionally damages stored information so legitimate work cannot continue.
Data Encrypted for Impact
Encryption for impact makes business data unavailable through unauthorized cryptographic changes.
Data Manipulation
Data manipulation changes information to influence operations or outcomes.
Data minimization and retention
Collect what is needed and decide when it should be removed.
Defacement
Defacement changes visible content to mislead, intimidate, or damage an organization's public or internal presentation.
Disaster recovery
Restore technical services in a tested sequence with trustworthy data.
Disk Wipe
Disk wiping damages raw storage or structures required to access data.
Firmware Corruption
Firmware corruption damages low-level device code or configuration so hardware becomes unreliable or unusable.
GDPR concepts
Understand personal-data responsibilities before applying legal requirements to a case.
Inhibit System Recovery
Inhibiting system recovery removes or disables features needed to restore an affected system.
NIST Cybersecurity Framework
Use outcome-oriented functions to organize risk management conversations.
PCI DSS concepts
Understand payment-data scope and use the current official standard.
Policies, standards, and procedures
Separate the direction, required rules, and steps people follow.
Resource Hijacking
Resource hijacking uses an accessed system's compute or other capacity for an unauthorized purpose.
Risk appetite and tolerance
Translate leadership’s boundaries into consistent decisions.
Risk assessment
Estimate plausible harm in context and explain the assumptions.
Risk registers
Track a risk scenario, its owner, decisions, and progress over time.
Risk treatment
Choose a response and verify what risk remains.
RTO and RPO
Express recovery time and tolerable data loss as distinct requirements.
Security governance
Make security decisions accountable and aligned with the organization’s purpose.
Service Stop
Service stopping interrupts functionality or prepares another action by disabling a component.
System Shutdown/Reboot
Unauthorized shutdown or reboot interrupts service and can affect evidence availability.
Tabletop exercises
Practice decisions and coordination before an actual incident.
Third-party risk
A supplier relationship can introduce security and resilience dependencies.
Threat modeling
Threat modeling examines what a system does, what could go wrong, and which protections address those risks.