Insights
Practitioner notes on identity, Zero Trust, DevSecOps, and security automation.
Why every automated remediation change needs an SBOM diff: generating SBOMs from the built image, signing them, comparing against the last approved release, and gating on exploitability before a person approves.
How we built an AI-driven vulnerability remediation workflow on AWS with Claude Code, the security decisions that made it safe to run, and why production deployment stays a human decision.
Discover key lessons from building a multi-tenant SaaS and why it’s nothing like an internal enterprise app. Learn how to navigate its unique challenges.
How Amazon Q Developer helped design a 266-resource Terraform infrastructure in AWS Commercial Cloud to support CJIS and FedRAMP Moderate requirements, including end-to-end FIPS 140-2 cryptography.
In cybersecurity, virtue is the true defense. Integrity, diligence, and ownership build trust, resilience, and lasting security beyond recognition.
M365 is everywhere. However, in light of the recent cyberattacks, may be it is time to reevaluate our dependence on Microsoft. May be it is time to diversify.
In the rapidly evolving digital landscape, organizations face unprecedented cybersecurity challenges.
This article dives into 5 proven strategies that organizations can use today to reduce these costs when migrating to zero trust security.
Why Identity is the first pillar of the Zero Trust Security Maturity Model and how to get it right with actionable steps.
Hello, everyone. In this post, we'll be discussing how add a custom QuickLink to a SailPoint IdentityIQ instance.
One of the core problems facing organizations and their cybersecurity is choosing an architecture that creates a never-ending rise in cost due to its need for greater numbers of highly qualified...
Hello, everyone. In this post, we'll be discussing how to send SailPoint IdentityIQ users email reminders that their passwords will be expiring.
Hello, everyone. In this post, we'll be discussing how to set an IIQ user's password expiration via REST, or to be more precise, how to work around the fact that setting a user's password via REST...
Discover the benefits of externalizing your SailPoint reporting.
As more companies adopt the remote working paradigm, security concerns have skyrocketed. This is an issue in the healthcare and finance industries, which deal with sensitive information.
This blog details why is it not a good idea to use a work or personal account with Administrator permissions on your PC.
How do you hunt through the tons of logs and audit data and ensure only unauthorized changes are identified and responded to?
Microsoft’s Azure Sentinel is a cloud native smart SIEM SOAR solution combining the power of the Cloud, Microsoft’s Intelligent Security Graph, Logic Apps, Analytics and AI.
This post is not step-by-step manual to Digitally Transform your Enterprise or your Life, but I hope it helps as a high-level guide to what things you should bear in mind on your journey to and...
Book 30 minutes with Zephon. Tell us where the program is stuck and we will tell you plainly whether we can help.