Category: Cyber Maturity

Signs that Shows that a Company’s Cybersecurity Framework Needs Rebuilding

Shuvro

Reading Time: 2 minutesA company’s cybersecurity framework needs rebuilding when it shows repeated gaps, outdated practices, or fails to adapt to evolving threats. Key warning signs include frequent incidents, audit failures, and static controls that don’t match the current attack surface.

KEV to EPSS – Smarter Threat Prioritization

Shuvro

Reading Time: 5 minutesBlueprint Details 1. Executive Summary: The Imperative for Smarter Threat Prioritization The cybersecurity landscape is overwhelmed by an ever-increasing volume of vulnerabilities, with over 25,000 new CVEs reported in 2022 alone. Traditional vulnerability management, often relying solely on CVSS scores, Read More …

PASTA – Process for Attack Simulation and Threat Analysis in the SOC

Shuvro

Reading Time: 4 minutesThis document outlines the PASTA-SOC framework, a structured methodology to evolve a Security Operations Center (SOC) from a reactive to a proactive, threat-informed defense model. It operationalizes the seven stages of the Process for Attack Simulation and Threat Analysis (PASTA) by integrating its business-centric principles with the tactical capabilities of modern security technologies, primarily Breach and Attack Simulation (BAS), Threat Intelligence Platforms (TIPs), and Security Orchestration, Automation, and Response (SOAR).

Playbook – The CTO Playbook in the Enterprise

Shuvro

Reading Time: 4 minutesStatus: Final Blueprint Author: Shahab Al Yamin Chawdhury  Organization: Principal Architect & Consultant Group Research Date: January 21, 2025 Location: Dhaka, Bangladesh Version: 1.0 Part I: The Strategic Mandate of the Modern CTO The role of the Chief Technology Officer Read More …

Wazuh, Beats, CheckMK, Open UBA, Open XDR, OpenCTI, Suricata, MISP, Snort, TheHive, Cortex, ELK, AlertAnalyst – and More Integration is Required…Does it Makes Sense?

Shuvro

Reading Time: 3 minutesThe decision to build a security platform from open-source components is conditional.

Auditor Became CISSP – Never Performed in Projects & in IS Development, Would You Hire Him for Your Infrastructure Platform Management? Can or Should that Knowledge Gap be Admissible?

Shuvro

Reading Time: 6 minutesStatus: Final Blueprint (Summary) Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: June 1, 2024 Location: Dhaka, Bangladesh Version: 1.0 1. The Core Dilemma: Assessor vs. Builder Mindset We are observing worldwide adoption on CISSP Read More …

CMMI Cybermaturity Platform in the Enterprise

Shuvro

Reading Time: 3 minutesStatus: Summary Blueprint Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: May 23, 2025 Version: 1.0 1. Executive Summary This document summarizes the architectural blueprint for the CMMI Cybermaturity Platform, an enterprise solution designed to Read More …