Engineering Cloud Identity and Access Management into the Paved Road
A practical security engineering field guide to cloud identity and access management, covering risk, implementation, evidence, and team leadership.
Nathan Berg
An Architecture Review Playbook for Cloud Identity and Access Management
A practical security engineering field guide to cloud identity and access management, covering risk, implementation, evidence, and team leadership.
Cloud Identity and Access Management: What the Team Must Decide Before Building
A practical security engineering field guide to cloud identity and access management, covering risk, implementation, evidence, and team leadership.
Local LLM Log Summaries with LMStudio and Python
Local LLMs are surprisingly useful in a home lab, especially for log triage. LMStudio lets you run a model locally with an OpenAI-compatible API. That means you can build a lightweight summarizatio...
How to Lead a Review of SBOMs and Build Provenance
A practical security engineering field guide to sboms and build provenance, covering risk, implementation, evidence, and team leadership.
Measuring SBOMs and Build Provenance Without Vanity Metrics
A practical security engineering field guide to sboms and build provenance, covering risk, implementation, evidence, and team leadership.
Turning Requirements for SBOMs and Build Provenance into Delivery Guardrails
A practical security engineering field guide to sboms and build provenance, covering risk, implementation, evidence, and team leadership.
Designing SBOMs and Build Provenance: Trust Boundaries, Failure Modes, and Tradeoffs
A practical security engineering field guide to sboms and build provenance, covering risk, implementation, evidence, and team leadership.
A Practical Risk Model for SBOMs and Build Provenance
A practical security engineering field guide to sboms and build provenance, covering risk, implementation, evidence, and team leadership.
A Practical Failure Exercise for Software Supply Chain Security
A practical security engineering field guide to software supply chain security, covering risk, implementation, evidence, and team leadership.