Over the course of studying, you will have seen a further reading section at end, which selfishly is my own bookmarking system.

To avoid a pile-up of unread items, I am will be using today (Sunday) as an opportunity to go through as many as I can with my notes and reflections below.

Day 05 shall be resumed scheduled programming.

• The Cyber Kill Chain, Lockheed Martin (2009)
• Bell-LaPadula Security Model
• NIST SP 800-37 v2 - Risk Management Framework

Overall, as a history nerd, it was fun to dive deeper into the geopolitical context behind how these frameworks came to be and their influences ranging from US Military, Defence industry thought leadership and to software development methodologies such as Agile.

As a visual learner, going forward, my focus is on mindmapping how they all come together to govern (pun intended) the day-to-day life of a GRC Practicioner.

To be read later

• NIST SP 800-30 Guide for conducting Risk Assessments

Cyber Risk Management Standards

• [ ] ISO 27005 - Information Security Management