Acuity Health: Part 8 — Executive Leadership Capstone Hotwash
The final synthesis of the Acuity Health Capstone: Navigating HIPAA enforcement, justifying security ROI to executive boards, and reviewing the complete enterprise reference architecture.
Zero Trust
Why I Replaced WordPress with Hugo: An Enterprise Security Engineer's Shift to Static Publishing
🏛️ The Cognitive Dissonance of a Security Engineer on WordPress For over two decades, I have engineered, hardened, and defended high-stakes enterprise infrastructure—from managing threat detection and clinical telemetry in regulated healthcare environments to architecting Zero Trust access models protecting tens of thousands of personnel and cloud assets across Amazon Web Services (AWS). My entire professional philosophy centers on fundamental security axioms: Minimize the attack surface to the absolute bare essentials. Eliminate ambient authority and enforce least privilege. Decouple critical dependencies and favor deterministic, auditable architectures. Shift security verification left into automated CI/CD quality gates. Yet for years, my personal technical writing lived on a standard WordPress instance. ...
Acuity Health: Part 2 — Zero Trust DevSecOps & NIST SSDF
How to build an isolated, Zero Trust development architecture using ephemeral runners, proxy-scanned package caches, and NIST SP 800-218 practices without slowing engineering velocity.
Acuity Health: Part 1 — Securing the 2 AM Urgent Care (Zero Trust for Distributed Clinics)
Why deploying hardware firewalls across 15 satellite clinics is an operational trap—and how to architect a cloud-native Zero Trust perimeter under NIST SP 800-207 that protects EMR databases without slowing down clinicians.
Acuity Health Enterprise Security Architecture: Hotwash Synthesis
The definitive synthesis and lessons-learned hotwash uniting enterprise architecture, DevSecOps, active defense, forensics, CTI, and governance into a master healthcare security blueprint.
Enterprise Healthcare Security Architecture: The Acuity Health Blueprint
Enterprise security architecture and Zero Trust blueprint for an expanding urgent care network under NIST SP 800-207 and the SABSA Multi-Tiered framework.
Quantum-Ready Risk Management Plan: Post-Quantum Cryptography Migration Strategy
Quantum computing promises revolutionary capabilities in processing power by harnessing the principles of quantum mechanics, such as superposition and entanglement. While these innovations could fuel scientific breakthro…
Automating AI Security Risk Assessment, LLM Governance, and Threat Detection
Artificial intelligence (AI) is transforming the way organizations approach cybersecurity. With its ability to sift through massive amounts of data and identify unusual behavior in real time, AI can help security teams s…
Cybersecurity Governance Frameworks, Regulatory Compliance, and Maturity Auditing
In the rapidly evolving healthcare landscape, cybersecurity governance plays a pivotal role in safeguarding sensitive patient information while supporting operational efficiency and regulatory compliance. As healthcare o…
Designing Robust Security Controls for Cloud and IoT Ecosystems
The growing adoption of cloud services and IoT devices has transformed the way organizations operate, offering new efficiencies and capabilities. However, these advancements also create a more complex cybersecurity envir…