Information Security
AI risk management in critical infrastructure via NIST AI RMF 1.0
How critical infrastructure operators can adapt the NIST AI RMF 1.0 framework to defend against specific AI threats and ...
// author
Yehor Yermolenko
Research Editor
Research Editor at finstar.org.ua. Prepares explanatory and analytical coverage of фінансових реформ та інвестицій: інвестиційних процесів, фінансової інфраструктури й цифрової прозорості.
42 articles
Cybersecurity & Compliance
Information Security
IAM and PAM: Stopping Privilege Creep and Ensuring Secure Off-boarding
How to build a controlled identity lifecycle, implement regular access reviews, and eliminate "orphaned" access vulnerab...
Information Security
AI in cybersecurity 2027: from perimeter defense to semantic DLP filters
How to protect corporate LLM integrations from data leaks and new attack vectors using NIST AI RMF, MITRE ATT&CK framewo...
Information Security
Incident response: the first 24 hours and regulatory requirements
How to balance technical cyberattack containment with strict compliance reporting requirements during the critical first...
Information Security
The compliance trap: why SIEM and certification do not guarantee operational resilience
We analyze common pitfalls in implementing monitoring tools and certifications without making real changes to daily secu...
Information Security
Security assessment and roadmap using NIST CSF 2.0
How to transition from chaotic protection to systemic resilience, identify hidden gaps, and implement targeted solutions...
Information Security
Building noise-free security monitoring with SIEM, SOC, and SOAR
A practical approach to overcoming SOC alert fatigue through MITRE ATT&CK mapping, SOAR automation, and NIST CSF 2.0 bus...
Information Security
Zero Trust for legacy systems: protection architecture via IAP and microsegmentation
How to protect legacy infrastructure from unauthorized access and lateral movement without major code refactoring using ...
Information Security
Integrating NIS2, ISO/IEC 27001, and KSZI requirements
Combining NIS2 directives, ISO/IEC 27001 processes, and KSZI requirements without redundant workflows. A practical appro...
Information Security
Cybersecurity as a discipline: threat modeling, architecture, and business risks
Moving from chaotic software procurement to systematic cyber resilience through threat modeling, architectural controls,...
Information Security
How to detect cloaking on a compromised website
Cloaking hides signs of website compromise by displaying spam content only to search bots. We analyze the threat mechani...
Information Security
Offboarding in 24 hours: securing access across IAM, VPN, SaaS, and service accounts
A practical guide for CISOs and IT administrators on turning employee termination into a controlled security process wit...