Vulnerability ManagementComplying with CISA: How continuous analysis aligns with BOD 26-04Paul WagenseilNovember 12, 2026Why CISA changed the vulnerability-management rules, and how this might affect you.
Compliance ManagementeMudhra revokes additional intermediate certificates following security investigationSC StaffNovember 12, 2026
Audits (External, Internal)Telling a design deficiency apart from an operating deficiencySC Media Editorial Intelligence, reviewed by Joi FrederickOctober 19, 2026
Audits (External, Internal)Rating deficiency severity when you have no severity rubricSC Media Editorial Intelligence, reviewed by Joi FrederickOctober 19, 2026
Audits (External, Internal)Aggregating small deficiencies into one that mattersSC Media Editorial Intelligence, reviewed by Joi FrederickOctober 19, 2026
Audits (External, Internal)Designing a control test that produces defensible evidenceSC Media Editorial Intelligence, reviewed by Jose Figueredo-MasedaOctober 19, 2026
Audits (External, Internal)Choosing a sample size you can defend to an auditorSC Media Editorial Intelligence, reviewed by Jose Figueredo-MasedaOctober 19, 2026
