cyber-risk

Simple CLI script to assist GRC analysts with risk ranking vendors.

Неофициальное зеркало БДУ ФСТЭК без геоблока: XML + XLSX + готовая SQLite-база с FTS5-индексом. 86 000+ уязвимостей, доступно через raw.githubusercontent.com.

The Way of the Cyber Warrior: Tactical Cyber Defense

Real-time distributed cyber-threat observatory monitoring ransomware attacks on global critical infrastructure. Features automated dark-web ingestion, Citizen Impact Scoring (CIS), and national risk heatmaps. Built with Next.js 15, Prisma, and Playwright

Enterprise third-party risk assessment framework covering vendor security evaluation, inherent risk scoring, compliance mapping, and remediation governance.

Evidence-governed quantitative cyber risk — a trustworthy CLI and scenario engine where every number traces to a reviewed public source.

Local-first quantitative cyber risk platform built on the FAIR methodology: Monte Carlo simulation, portfolio aggregation, and executive reporting. No cloud, no telemetry. (Beta)

Cyber risk and threat assessment project aligned with MITRE ATT&CK, OWASP Top 10, ISO 27001, NIST, and Threat Intelligence methodologies.

Professional cybersecurity consulting portfolio featuring governance, architecture, incident response, and risk management case studies.

Cyber risk governance framework covering control assessment, risk evaluation, remediation tracking, and compliance alignment.

Governance-focused incident response framework aligned with NIST 800-61, operational resilience, executive reporting, and cyber risk management principles.

Interactive risk quantifier: place risks on a 5x5 heat map, add frequency and loss ranges, then run 10,000 Monte Carlo iterations to turn the matrix into a loss distribution.

Cybersecurity risk intelligence dashboard analyzing CVE vulnerabilities, CVSS risk scores, and financial exposure using Power BI.

Repository for Cybrary Security Engineering & Cyber Risk – includes notes, docs, scenarios, extras, and certificate of completion.

Interactive loss exceedance curve guide, restyled to my portfolio palette

SDMC source-available non-commercial cyber intelligence decision and risk model created by Edwin Javier Peñuela Camacho

Enterprise STRIDE threat modeling assessment with DFD analysis, trust boundaries, attack surface evaluation, and mitigation mapping.

Interactive FAIR taxonomy study tool: build the decomposition tree from memory, assign units, match definitions. A training exercise.

Executive-focused cybersecurity threat intelligence. Business impact analysis of current threats. C-suite language, not geek speak. Updated daily.

Repository containing the final essay of the Ethics and Law of Data and AI course, valid for the accademic year 2024-2025 at UniTs.