PASTA – Process for Attack Simulation and Threat Analysis in the SOC

Reading Time: 4 minutesThis document outlines the PASTA-SOC framework, a structured methodology to evolve a Security Operations Center (SOC) from a reactive to a proactive, threat-informed defense model. It operationalizes the seven stages of the Process for Attack Simulation and Threat Analysis (PASTA) by integrating its business-centric principles with the tactical capabilities of modern security technologies, primarily Breach and Attack Simulation (BAS), Threat Intelligence Platforms (TIPs), and Security Orchestration, Automation, and Response (SOAR).

Build a Service-Based Security Resourcing Plan

Reading Time: 3 minutesThis document provides a comprehensive blueprint for transitioning from a traditional, in-house security model to a strategic, agile, and value-aligned service-based paradigm.

ASPM – Application Security Posture Management in the Enterprise

Reading Time: 4 minutesStatus: Final Blueprint Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: June 3, 2024 Location: Dhaka, Bangladesh Version: 1.0 Executive Summary Application Security Posture Management (ASPM) represents a strategic shift from fragmented, reactive vulnerability management Read More …

Auditor Became CISSP – Never Performed in Projects & in IS Development, Would You Hire Him for Your Infrastructure Platform Management? Can or Should that Knowledge Gap be Admissible?

Reading Time: 6 minutesStatus: Final Blueprint (Summary) Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: June 1, 2024 Location: Dhaka, Bangladesh Version: 1.0 1. The Core Dilemma: Assessor vs. Builder Mindset We are observing worldwide adoption on CISSP Read More …

Critically Define the Role of a Cybersecurity Architect

Reading Time: 4 minutesStatus: Final Blueprint Summary Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: March 1, 2022 Location: Dhaka, Bangladesh Version: 1.0 Part I: Foundational Blueprint Defining the Modern Architect: Beyond the Job Description The Cybersecurity Architect Read More …

Multi-Cloud Security in the Enterprise

Reading Time: 3 minutesThe modern enterprise operates in a multi-cloud reality. However, this state is often reached “accidentally” through uncoordinated business decisions, leading to a fragmented and dangerously complex security posture.

Automate Detection and Response to Website Defacement Attacks in Azure, AWS & GCP

Reading Time: 4 minutesStatus: Final Blueprint Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: July 26, 2024 Location: Dhaka, Bangladesh Version: 1.0 Executive Summary Website defacement is a critical security breach that inflicts significant reputational and financial damage. Read More …