Practical security learning, defensive thinking, web security, privacy, and risk management without claiming final answers.
Business Continuity Plan for Small Organizations — Keeping Going When the Unexpected Comes UpWhen I heard the term Business Continuity Plan or BCP, I used to imagine it as a thick document belonging to banks, large companies, and teams with meeting rooms that…
Read articleInformation Security Risk Assessment — How to Map Risks Before They Become IncidentsWhen building or maintaining a small system, I'm often …
CIS Controls v8 for Small Organizations — Starting with Security Where it Makes the Most ImpactWhen you hear the term cyber security framew…
Some time ago I was almost tricked. Not because my device is not secure, nor because my password is weak. It all started with one short mes…
I still remember the first time I read the NIST Cybersecurity Framework document several years ago. The number of pages was enough to make …
There are times when I sit in front of the terminal, thinking about the same thing: how do I learn cyber security practically without…
A few years ago, when I started getting serious about building my own web applications, security still felt like a topic to "learn later." …
Modeling Threats for Beginners — Learn to See Risks Before Gaps Become ProblemsWhen I first started studying security, I thought the sequen…
Reading CVEs Correctly — From Vulnerability Numbers to Patch DecisionsEvery time I open security news, I often see sentences that feel urge…
A few months ago, I started to get serious about separating services on a home server using Docker. One container for the web, one for th…
