Research Papers & Technical Blueprints on Code and Cypherhttps://codeandcypher.com/papers/Formal research papers, technical blueprints, and citable cybersecurity publications by Joshua Wortz.Code and Cypherhttps://codeandcypher.com/images/papermod-cover.pnghttps://codeandcypher.com/Hugoen-usAcuity Health Enterprise Security Architecture: Hotwash Synthesishttps://codeandcypher.com/papers/acuity-health-enterprise-architecture-hotwash-synthesis/Mon, 10 Aug 2026 00:00:00 -0700https://codeandcypher.com/papers/acuity-health-enterprise-architecture-hotwash-synthesis/Executive synthesis and architectural hotwash of the Acuity Health enterprise security transformation, mapping Zero Trust and NIST governance frameworks.Healthcare Privacy Law, Regulatory Compliance & Cybersecurity Governancehttps://codeandcypher.com/papers/healthcare-privacy-law-and-cybersecurity-governance/Sun, 02 Aug 2026 00:00:00 -0700https://codeandcypher.com/papers/healthcare-privacy-law-and-cybersecurity-governance/Analysis of HIPAA, HITECH, state privacy statutes, and corporate governance frameworks required for enterprise healthcare cybersecurity programs.Instituting Cyber Threat Intelligence: Predictive Blue-Team Operationshttps://codeandcypher.com/papers/instituting-cyber-threat-intelligence-in-healthcare/Sun, 26 Jul 2026 00:00:00 -0700https://codeandcypher.com/papers/instituting-cyber-threat-intelligence-in-healthcare/Operational blueprint for establishing a CTI program in a cloud-hosted healthcare provider, featuring threat platform evaluations and dynamic flare response.Healthcare Incident Response, Computer Network Forensics & Containmenthttps://codeandcypher.com/papers/healthcare-incident-response-and-computer-network-forensics/Mon, 20 Jul 2026 00:00:00 -0700https://codeandcypher.com/papers/healthcare-incident-response-and-computer-network-forensics/Digital forensics investigation and chain-of-custody framework analyzing an unauthorized EHR database breach involving VIP patient healthcare records.Active Blue-Team Defense, Applied Cryptography & Security Operationshttps://codeandcypher.com/papers/active-defense-cryptography-and-blue-team-integration/Mon, 13 Jul 2026 00:00:00 -0700https://codeandcypher.com/papers/active-defense-cryptography-and-blue-team-integration/Enterprise research synthesis on active blue-team defense, applied cryptography, and Zero Trust network telemetry operations in high-threat environments.Designing a Secure Software Development Program: Acuity Health AppSec Frameworkhttps://codeandcypher.com/papers/designing-a-secure-software-development-program/Mon, 06 Jul 2026 00:00:00 -0700https://codeandcypher.com/papers/designing-a-secure-software-development-program/An engineering framework operationalizing NIST SP 800-218 (SSDF), CI/CD quality gates, and OWASP API security defenses in a healthcare delivery organization.Enterprise Healthcare Security Architecture: The Acuity Health Blueprinthttps://codeandcypher.com/papers/enterprise-healthcare-security-architecture/Mon, 29 Jun 2026 00:00:00 -0700https://codeandcypher.com/papers/enterprise-healthcare-security-architecture/Enterprise security architecture and Zero Trust blueprint for an expanding urgent care network under NIST SP 800-207 and the SABSA Multi-Tiered framework.Kerberos Protocol Authentication: Ticket Granting, Mutual Authentication, and Blue Team Hardeninghttps://codeandcypher.com/papers/csol510-kerberos-authentication/Mon, 22 Jun 2026 00:00:00 -0700https://codeandcypher.com/papers/csol510-kerberos-authentication/Protocol analysis of Kerberos authentication tickets (TGT, TGS), pre-authentication security, and ticket-granting domain defense strategies.Cryptographic Key Metadata, Revocation Protocols, and Key Management Systemshttps://codeandcypher.com/papers/csol510-metadata-for-keys/Mon, 15 Jun 2026 00:00:00 -0700https://codeandcypher.com/papers/csol510-metadata-for-keys/Design principles for cryptographic key metadata, enforcing algorithm binding, usage constraints, and automated key expiration policies.Public-Key Cryptography, Digital Signatures, and Certificate Infrastructureshttps://codeandcypher.com/papers/csol510-public-key-cryptography/Mon, 08 Jun 2026 00:00:00 -0700https://codeandcypher.com/papers/csol510-public-key-cryptography/Architectural analysis of asymmetric cryptography, Diffie-Hellman key exchanges, and digital certificate validation across untrusted networks.Enterprise Cryptographic Controls: Key Lifecycle, Storage, and Transporthttps://codeandcypher.com/papers/csol510-cryptographic-controls/Mon, 01 Jun 2026 00:00:00 -0700https://codeandcypher.com/papers/csol510-cryptographic-controls/Evaluation of cryptographic control selection, implementation trade-offs, and compliance assurances under FIPS 140-3 and ISO/IEC 19790.Hardware Root of Trust: Trusted Platform Module (TPM) Implementation and Verificationhttps://codeandcypher.com/papers/csol510-trusted-platform-module-tpm/Mon, 25 May 2026 00:00:00 -0700https://codeandcypher.com/papers/csol510-trusted-platform-module-tpm/Technical analysis of TPM 2.0 cryptographic primitives, secure boot measurement, and platform integrity attestation architecture.Cryptanalysis and Frequency Analysis: Breaking Classical Alphabetic Ciphershttps://codeandcypher.com/papers/csol510-breaking-alphabetic-ciphers/Mon, 18 May 2026 00:00:00 -0700https://codeandcypher.com/papers/csol510-breaking-alphabetic-ciphers/Cryptanalytic study of classical substitution ciphers, frequency analysis, and mathematical foundations of modern symmetric cryptography.Security Models and Kerckhoffs's Principle in Applied Cryptographyhttps://codeandcypher.com/papers/csol510-security-models-and-kerchhoffs-principle/Mon, 11 May 2026 00:00:00 -0700https://codeandcypher.com/papers/csol510-security-models-and-kerchhoffs-principle/Foundational review of Kerckhoffs's Principle, Shannon's cipher security models, and why security-by-obscurity consistently fails.Enterprise Cyber Threat Intelligence Program Plan: Operational Framework and Platform Architecturehttps://codeandcypher.com/papers/csol580-part-i-cyber-threat-intelligence-program-plan-propos/Mon, 06 Apr 2026 00:00:00 -0700https://codeandcypher.com/papers/csol580-part-i-cyber-threat-intelligence-program-plan-propos/Operational proposal for establishing an enterprise Cyber Threat Intelligence (CTI) capability, platform architecture, and collection strategy.Adversary TTP Mapping and Attack Path Analysis Using the MITRE ATT&CK Frameworkhttps://codeandcypher.com/papers/csol580-analyzing-cyber-attacks-using-the-mitre-att-ck-matri/Mon, 23 Mar 2026 00:00:00 -0700https://codeandcypher.com/papers/csol580-analyzing-cyber-attacks-using-the-mitre-att-ck-matri/Adversary tactics, techniques, and procedures (TTPs) mapping using MITRE ATT&CK to reconstruct enterprise identity and cloud intrusion paths.Strategic Value of Threat Intelligence: Cost Savings, Risk Reduction, and Security Optimizationhttps://codeandcypher.com/papers/csol580-strategic-cost-savings-productivity-enhancement-and/Mon, 23 Mar 2026 00:00:00 -0700https://codeandcypher.com/papers/csol580-strategic-cost-savings-productivity-enhancement-and/Executive business case demonstrating CTI ROI, incident cost reduction, and SOC productivity enhancement through automated intelligence feeds.Cyber Threat Intelligence Triage and Executive Response Reporthttps://codeandcypher.com/papers/csol580-intelligence-triage-and-response-report/Mon, 16 Mar 2026 00:00:00 -0700https://codeandcypher.com/papers/csol580-intelligence-triage-and-response-report/Executive threat intelligence triage report analyzing an advanced persistent threat campaign and delivering defensive response playbooks.Forensic Investigation Findings: Incident Reconstruction, Root Cause, and Expert Witness Reporthttps://codeandcypher.com/papers/csol590-presentation-of-findings/Mon, 16 Feb 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-presentation-of-findings/Forensic investigation report and expert witness documentation synthesizing digital evidence, chronological timeline reconstruction, and findings.Standard Operating Procedures (SOP) for Digital Forensics and Evidence Handlinghttps://codeandcypher.com/papers/csol590-implementing-standard-operating-procedures-for-handl/Mon, 16 Feb 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-implementing-standard-operating-procedures-for-handl/Standard operating procedures (SOP) for digital forensics evidence intake, forensic imaging, chain-of-custody tracking, and legal hold compliance.Legal Admissibility of Digital Evidence: Federal Rules of Evidence and Daubert Standardshttps://codeandcypher.com/papers/csol590-understanding-digital-evidence/Mon, 09 Feb 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-understanding-digital-evidence/Legal admissibility standards for digital evidence under Federal Rules of Evidence, Daubert criteria, and ISO/IEC 27037 forensic guidelines.Mobile Device Forensics: Extraction, Decoding, and SQLite Database Analysishttps://codeandcypher.com/papers/csol590-analyze-a-cell-phone-image/Mon, 02 Feb 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-analyze-a-cell-phone-image/Digital forensics analysis of a mobile device image, decoding SQLite databases, call logs, and deleted communication artifacts.Forensic Artifact Analysis Using Autopsy: File System Reconstruction and Timeline Carvinghttps://codeandcypher.com/papers/csol590-examine-the-evidence-using-autopsy/Mon, 26 Jan 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-examine-the-evidence-using-autopsy/Forensic artifact investigation using Autopsy, examining file system timestamps, deleted inode carving, and keyword index analysis.Digital Forensics: Evidence Acquisition, Chain of Custody, and Volatile Memory Preservationhttps://codeandcypher.com/papers/csol590-preservation-and-acquisition-of-the-evidence/Mon, 19 Jan 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-preservation-and-acquisition-of-the-evidence/Digital evidence acquisition and live volatile memory preservation procedures ensuring forensic integrity and cryptographic hash verification.Enterprise Incident Response Plan and RACI Governance Matrixhttps://codeandcypher.com/papers/csol590-incident-response-plan-responsibility-chart/Mon, 12 Jan 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-incident-response-plan-responsibility-chart/Incident response governance framework establishing RACI matrices, triage escalation paths, and executive communication protocols.Software Security Metrics, Technical Debt Quantification, and Program Maturityhttps://codeandcypher.com/papers/csol560-risks-and-metric-in-software-systems/Mon, 08 Dec 2025 00:00:00 -0700https://codeandcypher.com/papers/csol560-risks-and-metric-in-software-systems/Quantitative framework for software security metrics, technical debt measurement, and AppSec maturity assessment (OpenSAMM/BSIMM).Ransomware Simulator: Cryptographic Attack Modeling and Application-Level Defenseshttps://codeandcypher.com/papers/csol560-ransomware-simulator/Sun, 30 Nov 2025 00:00:00 -0700https://codeandcypher.com/papers/csol560-ransomware-simulator/Engineering design and safe execution of a controlled ransomware simulation framework to validate endpoint detection and backup resilience.Static Application Security Testing (SAST) and Secure Web Application Designhttps://codeandcypher.com/papers/csol560-static-analysis-of-a-website-secure-design/Mon, 24 Nov 2025 00:00:00 -0700https://codeandcypher.com/papers/csol560-static-analysis-of-a-website-secure-design/Static application security testing (SAST) methodology and secure web application architecture aligned with OWASP Top 10 guidelines.Threat Modeling and Architectural Risk Analysis: STRIDE and DREAD Applicationshttps://codeandcypher.com/papers/csol560-risks-threats-vulnerabilities/Mon, 17 Nov 2025 00:00:00 -0700https://codeandcypher.com/papers/csol560-risks-threats-vulnerabilities/Architectural threat modeling applying STRIDE and DREAD frameworks to identify vulnerabilities and prioritize engineering mitigations.Secure Software Development Life Cycle (SSDLC): Comparative Analysis of Microsoft SDL and Apple Ecosystemshttps://codeandcypher.com/papers/csol560-secure-software-development-life-cycle-ssdlc-microso/Fri, 14 Nov 2025 00:00:00 -0700https://codeandcypher.com/papers/csol560-secure-software-development-life-cycle-ssdlc-microso/Comparative analysis of Secure Software Development Life Cycle models, contrasting Microsoft SDL with Apple secure development practices.Compromised Network Indicators and Secure Application Risk Mitigationshttps://codeandcypher.com/papers/csol560-compromised-network-indicators-and-risk-mitigations/Mon, 03 Nov 2025 00:00:00 -0700https://codeandcypher.com/papers/csol560-compromised-network-indicators-and-risk-mitigations/Technical analysis of Indicators of Compromise (IoCs), lateral movement detection, and host-based risk mitigation playbooks.Secure Software Development Life Cycle (SDLC) Phase Analysis and Control Gateshttps://codeandcypher.com/papers/csol560-csol-560-module-1-assignment-table/Mon, 27 Oct 2025 00:00:00 -0700https://codeandcypher.com/papers/csol560-csol-560-module-1-assignment-table/Comparative evaluation of eight software development life cycle (SDLC) models across requirement volatility, risk management, and security control integration.Supply Chain Cyber Attack Investigation: Root Cause Analysis, Impact Scoping, and Remediationhttps://codeandcypher.com/papers/csol570-final-assignment-7-1-supply-chain-attack-investigati/Sat, 18 Oct 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-final-assignment-7-1-supply-chain-attack-investigati/Forensic root cause analysis and scoping of a decentralized software supply chain compromise, establishing containment and vendor remediation.Post-Exploitation Detection and Network Reconnaissance Signature Analysishttps://codeandcypher.com/papers/csol570-post-exploitation-and-nmap-scanning/Mon, 29 Sep 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-post-exploitation-and-nmap-scanning/Technical analysis of network reconnaissance signatures and post-exploitation detection using telemetry from host and network sensors.Open Source Intelligence (OSINT) and Mobile Telemetry for Blue Team Defensehttps://codeandcypher.com/papers/csol570-open-source-and-mobile-intel-for-security/Sat, 20 Sep 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-open-source-and-mobile-intel-for-security/Open-source intelligence (OSINT) and mobile telemetry collection framework for proactive threat hunting and attack surface monitoring.Honeypots and Deception Technologies: Strategic Attacker Disruption and Early Warninghttps://codeandcypher.com/papers/csol570-honeypots-and-deception-techniques/Sun, 14 Sep 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-honeypots-and-deception-techniques/Strategic evaluation of honeypots, honeytokens, and active deception technology to disrupt attacker reconnaissance and generate high-fidelity alerts.Cybersecurity and International Law: State Sovereignty, Tallinn Manual, and Extraterritorial Jurisdictionhttps://codeandcypher.com/papers/csol540-cybersecurity-and-international-law-case-analysis/Mon, 11 Aug 2025 00:00:00 -0700https://codeandcypher.com/papers/csol540-cybersecurity-and-international-law-case-analysis/International law analysis applying the Tallinn Manual, state sovereignty, and rules of engagement to nation-state cyber warfare.HyperBeard COPPA Compliance Analysis: Children's Online Privacy Enforcementhttps://codeandcypher.com/papers/csol540-hyperbeard-coppa-compliance-analysis/Fri, 01 Aug 2025 00:00:00 -0700https://codeandcypher.com/papers/csol540-hyperbeard-coppa-compliance-analysis/Regulatory case study examining FTC enforcement against HyperBeard for COPPA violations involving behavioral advertising to minors.The Blue Team Mindset: Active Defense, Telemetry Engineering, and Defensive Posturehttps://codeandcypher.com/papers/csol570-the-blue-team-mindset/Fri, 01 Aug 2025 00:00:00 -0700https://codeandcypher.com/papers/csol570-the-blue-team-mindset/Exploration of active blue-team defense methodologies, telemetry engineering, and continuous adversary engagement in enterprise SOCs.DMCA and IoT Security: Legal Analysis of Reverse Engineering, Firmware Access, and Copyright Protectionshttps://codeandcypher.com/papers/csol540-introduction/Mon, 28 Jul 2025 00:00:00 -0700https://codeandcypher.com/papers/csol540-introduction/Analyzes DMCA and EULA case law (Davidson v. Jung, Philips, MDY v. Blizzard), applying judicial doctrines to IoT firmware access and security research rights.Comparative Analysis of Data Breach Notification Statutes and Litigation Riskhttps://codeandcypher.com/papers/csol540-analyzing-data-breach-laws-and-their-impact/Mon, 21 Jul 2025 00:00:00 -0700https://codeandcypher.com/papers/csol540-analyzing-data-breach-laws-and-their-impact/Analysis of state and federal data breach notification statutes, statutory timelines, and consumer notification requirements.Cross-Sector Compliance Analysis: SEC Disclosures, HIPAA Security Rule, and FERPAhttps://codeandcypher.com/papers/csol540-compliance-analysis-of-sec-hipaa-and-ferpa-cybersecu/Mon, 14 Jul 2025 00:00:00 -0700https://codeandcypher.com/papers/csol540-compliance-analysis-of-sec-hipaa-and-ferpa-cybersecu/Comparative compliance mapping across SEC cybersecurity disclosure rules, HIPAA Security Safeguards, and FERPA educational privacy.Regulatory Compliance and Enforcement: FTC, SEC, and State AG Jurisdictionshttps://codeandcypher.com/papers/csol540-analyzing-cybersecurity-compliance-and-enforcement/Mon, 07 Jul 2025 00:00:00 -0700https://codeandcypher.com/papers/csol540-analyzing-cybersecurity-compliance-and-enforcement/Comparative legal analysis of regulatory enforcement actions, consent decrees, and legal liabilities following corporate data breaches.Cybercrime Jurisprudence: Statutory Analysis of the CFAA and Wire Fraud Acthttps://codeandcypher.com/papers/csol540-cybercrime-analysis/Sat, 28 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol540-cybercrime-analysis/Case study of Roman Seleznev's card theft ring, examining point-of-sale SQL injection exploits, foreign extradition, and federal cyber fraud prosecution.Quantum-Ready Risk Management Plan: Post-Quantum Cryptography Migration Strategyhttps://codeandcypher.com/papers/csol530-quantum-ready-risk-management-plan/Sun, 22 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-quantum-ready-risk-management-plan/Strategic risk management roadmap for transitioning enterprise cryptography to post-quantum standards before cryptanalytic breakthroughs.Automating AI Security Risk Assessment, LLM Governance, and Threat Detectionhttps://codeandcypher.com/papers/csol530-automating-ai-security-risks/Sun, 15 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-automating-ai-security-risks/Framework for identifying and mitigating AI security risks, prompt injection vectors, and automated model evaluation pipelines.Cybersecurity Governance Frameworks, Regulatory Compliance, and Maturity Auditinghttps://codeandcypher.com/papers/csol530-cybersecurity-governance-and-compliance/Wed, 04 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-cybersecurity-governance-and-compliance/Governance framework analyzing policy hierarchies, compliance mapping, and audit readiness across regulated enterprise environments.Designing Robust Security Controls for Cloud and IoT Ecosystemshttps://codeandcypher.com/papers/csol530-designing-robust-security-controls-for-cloud-and-iot/Mon, 02 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-designing-robust-security-controls-for-cloud-and-iot/Security architecture blueprint specifying robust isolation controls, mutual TLS, and device attestation for cloud and IoT ecosystems.Designing a Zero Trust Strategy for Third-Party and Vendor Risk Managementhttps://codeandcypher.com/papers/csol530-designing-a-zero-trust-strategy-for-third-party-risk/Mon, 26 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-designing-a-zero-trust-strategy-for-third-party-risk/Zero Trust architecture blueprint enforcing dynamic context-based access and least privilege for third-party vendors and contractors.Enterprise Risk Analysis Report: Quantitative and Qualitative Risk Assessmenthttps://codeandcypher.com/papers/csol530-creating-a-risk-analysis-report/Sat, 17 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-creating-a-risk-analysis-report/Methodology for synthesizing technical vulnerability data into executive-ready risk analysis reports with actionable remediation roadmaps.Fundamentals of Cyber Governance: Alignment, Oversight, and Policy Enactmenthttps://codeandcypher.com/papers/csol530-fundamentals-of-cyber-governance/Sun, 11 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-fundamentals-of-cyber-governance/Foundations of cybersecurity governance, board oversight, risk appetite formulation, and regulatory accountability structures.Component Architecture Blueprint: Security Micro-Segmentation and Service Mesheshttps://codeandcypher.com/papers/csol520-blueprint-for-modern-component-architecture/Mon, 07 Apr 2025 00:00:00 -0700https://codeandcypher.com/papers/csol520-blueprint-for-modern-component-architecture/Component-level security blueprint detailing zero-trust network zones, API gateways, and defense-in-depth isolation mechanisms.Physical and Environmental Security Architecture for Enterprise Facilitieshttps://codeandcypher.com/papers/csol520-developing-a-physical-security-architecture/Mon, 31 Mar 2025 00:00:00 -0700https://codeandcypher.com/papers/csol520-developing-a-physical-security-architecture/Physical and infrastructure security architecture covering data center zoning, environmental controls, and hardware tamper defense.Logical Security Architecture: Zero Trust Zones, Segmentations, and Access Controlshttps://codeandcypher.com/papers/csol520-creating-the-logical-architecture/Mon, 24 Mar 2025 00:00:00 -0700https://codeandcypher.com/papers/csol520-creating-the-logical-architecture/Logical security architecture framework defining data flow boundaries, authorization services, and access control matrices.Conceptual Security Architecture: Enterprise Risk Modeling and Defense Boundarieshttps://codeandcypher.com/papers/csol520-conceptual-security-architecture/Mon, 17 Mar 2025 00:00:00 -0700https://codeandcypher.com/papers/csol520-conceptual-security-architecture/Foundational conceptual security architecture translating organizational missions into verifiable enterprise protection boundaries.Defining Strategic Goals, Business Drivers, and Security Objectiveshttps://codeandcypher.com/papers/csol520-defining-goals-and-objectives/Mon, 10 Mar 2025 00:00:00 -0700https://codeandcypher.com/papers/csol520-defining-goals-and-objectives/Strategic governance guide for establishing measurable security goals, KPI metrics, and executive cyber risk alignment.A Conceptual Model of Enterprise Security Architecturehttps://codeandcypher.com/papers/csol520-a-conceptual-model-of-architecture/Mon, 03 Mar 2025 00:00:00 -0700https://codeandcypher.com/papers/csol520-a-conceptual-model-of-architecture/Conceptual security architecture model synthesizing business drivers, threat contexts, and high-level control objectives using SABSA.Developing a Comprehensive Cybersecurity Program Planhttps://codeandcypher.com/papers/csol500-final-project-developing-a-cybersecurity-program-pla/Mon, 24 Feb 2025 00:00:00 -0700https://codeandcypher.com/papers/csol500-final-project-developing-a-cybersecurity-program-pla/Comprehensive enterprise cybersecurity program plan integrating ISO 27001, NIST CSF governance, and defense-in-depth operational controls.Vulnerability Analysis: Threat Identification, Severity Scoring, and Remediationhttps://codeandcypher.com/papers/csol500-vulnerability-analysis/Sun, 16 Feb 2025 00:00:00 -0700https://codeandcypher.com/papers/csol500-vulnerability-analysis/Methodology for automated vulnerability scanning, common vulnerability scoring (CVSS), and prioritized risk remediation in production networks.Cloud Security Risks and Shared Responsibility Mitigationshttps://codeandcypher.com/papers/csol500-cloud-security-risks-mitigations/Mon, 10 Feb 2025 00:00:00 -0700https://codeandcypher.com/papers/csol500-cloud-security-risks-mitigations/Evaluation of cloud shared responsibility models, identity governance, and multi-tenant architectural risk mitigations for enterprise workloads.Hacking Wall Street: Financial Sector Cyber Threats and Attack Vectorshttps://codeandcypher.com/papers/csol500-hacking-wall-street/Sat, 27 Jan 2024 00:00:00 -0700https://codeandcypher.com/papers/csol500-hacking-wall-street/Examines financial sector cyber threats, evaluating simulated attack rehearsal efficacy and data loss prevention across major banking infrastructures.Taxonomy of Enterprise Cyber Risk: Strategic, Operational, and Technical Analysishttps://codeandcypher.com/papers/csol500-risk-types/Sat, 20 Jan 2024 00:00:00 -0700https://codeandcypher.com/papers/csol500-risk-types/Taxonomy and comparative assessment of operational, technological, financial, and reputational cyber risk categories across enterprise systems.The Six Phases of the ADDIOI Model: Foundations of Cybersecurity Program Designhttps://codeandcypher.com/papers/csol500-the-six-phases-of-the-addioi-model/Fri, 12 Jan 2024 00:00:00 -0700https://codeandcypher.com/papers/csol500-the-six-phases-of-the-addioi-model/Explains Schreider's six-phase ADDIOI cybersecurity model (Align, Design, Develop, Implement, Operate, Improve) and principles for enterprise security programs.