iso27001-2022

SCORM training for organisations, around secure coding around agents

Enterprise-grade Information Security Risk Assessment Framework for the banking sector, fully aligned with ISO/IEC 27001:2022, ISO 27005, and BDDK regulatory compliance. Includes automated risk scoring engines and control mappings. 🏦🛡️️📊

Windows AD CA PKI Hardening Audit Ready

Portfolio GRC risk assessment framework for a fictional payments company. Third-party/vendor risk module complete; four more planned

Documenting my transition from academia/DevOps into GRC — risk assessment, TPRM, and ISO frameworks, building toward Enterprise Risk Management in Germany.

A practical portfolio showcasing hands-on experience with GRC frameworks, audits, and risk assessments.

Proprietary concept of transforming university infrastructure into a secure ISO 27001 Data Hub & Shelter. Zero Trust architecture.

Sample ISO 27001 (2022 edition) gap analysis of a fictional organisation using synthetic data, assessing current controls against the standard and documenting gaps and recommended actions.

ISO 27001:2022 & ISO 27002 Internal Audit Documentation & Compliance Project — NTI GRC Graduation Project (Team 4).

GRC risk register, threat modeling, and compliance mapping portfolio

ISO 27001:2022 Information Security Management System (ISMS) Portfolio with AI Security & GRC Implementation

Key Evidence Engine for ISMS management and mapping of real data to framework controls and clauses

grc cloud-security nist iso27001 risk-management ai-governance nist-ai-rmf eu-ai-act zero-trust cspm aws-security compliance

Mapping web application VAPT findings to ISO/IEC 27001:2022 Annex A controls — translating technical vulnerabilities into business risk language with prioritized remediation. Built to demonstrate the bridge between security testing and GRC.