Cybersecurity implementation guides

Available guides

• Exposure Management Maturity Guide Coming soon

  Maturity assessment framework for continuous exposure management programs, covering capability benchmarks, tooling integration, and metrics-driven improvement paths for enterprise security posture.

  10 min read CTEMMaturity Model
• Exposure Management Playbook Coming soon

  Tactical playbook for implementing continuous threat exposure management including attack surface discovery, vulnerability prioritization, and remediation workflows aligned with CISA KEV and EPSS.

  12 min read CISA KEVEPSS
• Identity Threat Detection Guide Coming soon

  Detection engineering guide for identity-based attacks covering credential theft, privilege escalation, and lateral movement patterns with MITRE ATT&CK mapping and SIEM integration strategies.

  14 min read MITRE ATT&CKITDR
• Incident Response Automation Guide Coming soon

  SOAR implementation guide covering playbook design, automated containment actions, enrichment integrations, and escalation workflows to reduce mean time to respond for security incidents.

  10 min read SOARAutomation
• Incident Response Modernization Guide Coming soon

  Framework for modernizing incident response capabilities including cloud-native detection, threat hunting integration, and regulatory notification procedures for cross-jurisdictional incidents.

  12 min read Cloud IRThreat Hunting
• ISO/IEC 27001:2022 Transition Playbook Coming soon

  Step-by-step transition guide from ISO 27001:2013 to the 2022 revision covering new control requirements, clause mapping, documentation updates, and certification audit preparation timelines.

  15 min read ISO 27001ISMS
• MFA Resilience Guide Coming soon

  Technical guide for hardening multi-factor authentication against bypass attacks including phishing-resistant methods, token binding, and recovery workflow security for enterprise identity systems.

  8 min read MFAPhishing-Resistant
• NIS2 Supply-Chain Risk Assessment Guide Coming soon

  Compliance guide for NIS2 Directive supply chain security requirements including vendor risk assessments, contractual controls, and incident notification procedures for essential entity suppliers.

  12 min read NIS2Supply Chain
• Cybersecurity Operations Playbook

  Comprehensive SOC operations guide covering detection engineering, alert triage, investigation workflows, and metrics frameworks for security operations center effectiveness measurement.

  18 min read SOCDetection Engineering
• Operational Technology Security Guide Coming soon

  Security framework for industrial control systems and operational technology environments covering ICS/SCADA protection, asset inventory, network monitoring, and incident response aligned with IEC 62443.

  15 min read IEC 62443ICS/SCADA
• OT Network Segmentation Playbook Coming soon

  Technical playbook for implementing network segmentation in OT environments covering Purdue model architecture, firewall rule design, and safe communication patterns between IT and OT zones.

  12 min read Purdue ModelSegmentation
• PAM Rollout Guide Coming soon

  Implementation guide for privileged access management programs covering credential vaulting, session recording, just-in-time access, and integration patterns with identity governance workflows.

  10 min read PAMJIT Access
• Threat Intelligence Consumption Guide Coming soon

  Operational guide for consuming threat intelligence feeds including STIX/TAXII integration, indicator enrichment, detection rule generation, and threat hunting hypothesis development.

  12 min read STIX/TAXIICTI