Zero Trust on Code and Cypherhttps://codeandcypher.com/tags/zero-trust/Enterprise cybersecurity research by Joshua A. Wortz, CISSP: Zero Trust, cloud security, DevSecOps, threat defense, and AI-security education.Code and Cypherhttps://codeandcypher.com/images/papermod-cover.pnghttps://codeandcypher.com/Hugoen-usThu, 22 Oct 2026 17:20:43 -0700Acuity Health: Part 8 — Executive Leadership Capstone Hotwashhttps://codeandcypher.com/series/acuity-health-security-architecture/part-8-executive-leadership-capstone-hotwash/Tue, 27 Oct 2026 00:00:00 -0700https://codeandcypher.com/series/acuity-health-security-architecture/part-8-executive-leadership-capstone-hotwash/The culminating capstone hotwash reviewing lessons learned, security ROI frameworks, and a multi-year Zero Trust security blueprint for enterprise healthcare.Why I Replaced WordPress with Hugo: An Enterprise Security Engineer's Shift to Static Publishinghttps://codeandcypher.com/posts/why-i-moved-from-wordpress-to-hugo/Thu, 22 Oct 2026 08:00:00 -0700https://codeandcypher.com/posts/why-i-moved-from-wordpress-to-hugo/Why enterprise security engineer Joshua Wortz traded WordPress for Hugo: eliminating attack surface, cutting runtime bloat, and embracing DevSecOps purity.Acuity Health: Part 2 — Zero Trust DevSecOps & NIST SSDFhttps://codeandcypher.com/series/acuity-health-security-architecture/part-2-architecting-zero-trust-devsecops/Tue, 15 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/acuity-health-security-architecture/part-2-architecting-zero-trust-devsecops/Operationalize NIST SP 800-218 (SSDF) and Zero Trust Architecture across cloud-native development environments, ephemeral CI/CD pipelines, and supply chains.Acuity Health: Part 1 — Securing the 2 AM Urgent Care (Zero Trust for Distributed Clinics)https://codeandcypher.com/series/acuity-health-security-architecture/part-1-enterprise-security-architecture/Tue, 08 Sep 2026 00:00:00 -0700https://codeandcypher.com/series/acuity-health-security-architecture/part-1-enterprise-security-architecture/Secure decentralized urgent care clinics with a lean IT team using port-level dynamic VLANs, gloved-hand MFA, EDR micro-isolation, and immutable WORM backups.Acuity Health Enterprise Security Architecture: Hotwash Synthesishttps://codeandcypher.com/papers/acuity-health-enterprise-architecture-hotwash-synthesis/Mon, 10 Aug 2026 00:00:00 -0700https://codeandcypher.com/papers/acuity-health-enterprise-architecture-hotwash-synthesis/Executive synthesis and architectural hotwash of the Acuity Health enterprise security transformation, mapping Zero Trust and NIST governance frameworks.Enterprise Healthcare Security Architecture: The Acuity Health Blueprinthttps://codeandcypher.com/papers/enterprise-healthcare-security-architecture/Mon, 29 Jun 2026 00:00:00 -0700https://codeandcypher.com/papers/enterprise-healthcare-security-architecture/Enterprise security architecture and Zero Trust blueprint for an expanding urgent care network under NIST SP 800-207 and the SABSA Multi-Tiered framework.Quantum-Ready Risk Management Plan: Post-Quantum Cryptography Migration Strategyhttps://codeandcypher.com/papers/csol530-quantum-ready-risk-management-plan/Sun, 22 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-quantum-ready-risk-management-plan/Strategic risk management roadmap for transitioning enterprise cryptography to post-quantum standards before cryptanalytic breakthroughs.Automating AI Security Risk Assessment, LLM Governance, and Threat Detectionhttps://codeandcypher.com/papers/csol530-automating-ai-security-risks/Sun, 15 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-automating-ai-security-risks/Framework for identifying and mitigating AI security risks, prompt injection vectors, and automated model evaluation pipelines.Cybersecurity Governance Frameworks, Regulatory Compliance, and Maturity Auditinghttps://codeandcypher.com/papers/csol530-cybersecurity-governance-and-compliance/Wed, 04 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-cybersecurity-governance-and-compliance/Governance framework analyzing policy hierarchies, compliance mapping, and audit readiness across regulated enterprise environments.Designing Robust Security Controls for Cloud and IoT Ecosystemshttps://codeandcypher.com/papers/csol530-designing-robust-security-controls-for-cloud-and-iot/Mon, 02 Jun 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-designing-robust-security-controls-for-cloud-and-iot/Security architecture blueprint specifying robust isolation controls, mutual TLS, and device attestation for cloud and IoT ecosystems.Designing a Zero Trust Strategy for Third-Party and Vendor Risk Managementhttps://codeandcypher.com/papers/csol530-designing-a-zero-trust-strategy-for-third-party-risk/Mon, 26 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-designing-a-zero-trust-strategy-for-third-party-risk/Zero Trust architecture blueprint enforcing dynamic context-based access and least privilege for third-party vendors and contractors.Enterprise Risk Analysis Report: Quantitative and Qualitative Risk Assessmenthttps://codeandcypher.com/papers/csol530-creating-a-risk-analysis-report/Sat, 17 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-creating-a-risk-analysis-report/Methodology for synthesizing technical vulnerability data into executive-ready risk analysis reports with actionable remediation roadmaps.Fundamentals of Cyber Governance: Alignment, Oversight, and Policy Enactmenthttps://codeandcypher.com/papers/csol530-fundamentals-of-cyber-governance/Sun, 11 May 2025 00:00:00 -0700https://codeandcypher.com/papers/csol530-fundamentals-of-cyber-governance/Foundations of cybersecurity governance, board oversight, risk appetite formulation, and regulatory accountability structures.