Information Security
Security assessment and roadmap using NIST CSF 2.0
How to transition from chaotic protection to systemic resilience, identify hidden gaps, and implement targeted solutions...
// author
Oleh Kravchenko
Cybersecurity Engineer
Specializes in protecting critical infrastructure and enterprise systems: Zero Trust models, access management, DLP, ISO/IEC 27001 compliance. Over 10 years designing and auditing information security systems.
50 articles
Cybersecurity & Compliance
Information Security
Building noise-free security monitoring with SIEM, SOC, and SOAR
A practical approach to overcoming SOC alert fatigue through MITRE ATT&CK mapping, SOAR automation, and NIST CSF 2.0 bus...
Information Security
Zero Trust for legacy systems: protection architecture via IAP and microsegmentation
How to protect legacy infrastructure from unauthorized access and lateral movement without major code refactoring using ...
Information Security
Integrating NIS2, ISO/IEC 27001, and KSZI requirements
Combining NIS2 directives, ISO/IEC 27001 processes, and KSZI requirements without redundant workflows. A practical appro...
Information Security
Cybersecurity as a discipline: threat modeling, architecture, and business risks
Moving from chaotic software procurement to systematic cyber resilience through threat modeling, architectural controls,...
Information Security
How to detect cloaking on a compromised website
Cloaking hides signs of website compromise by displaying spam content only to search bots. We analyze the threat mechani...
Information Security
Offboarding in 24 hours: securing access across IAM, VPN, SaaS, and service accounts
A practical guide for CISOs and IT administrators on turning employee termination into a controlled security process wit...
Information Security
Zero Trust for legacy ERP without rewriting: IAP, PAM and microsegmentation
How to secure legacy ERP systems without rewriting code. Implement Zero Trust using IAP, PAM, and microsegmentation to m...
Information Security
Managing mass URL injection and SEO threats
A sudden surge in indexed URLs may signal a security breach or a technical configuration issue. Learn how to localize th...
Information Security
Unknown sitemap in Google Search Console: legacy CMS or compromise indicator
The appearance of an unauthorized sitemap in GSC is a critical signal of potential compromise via content injection. Why...
Information Security
SEO after site hack: removing spam URLs from index
Server cleanup does not remove indexed hacked content. Learn how to perform a URL audit, implement correct HTTP status c...
Information Security
Casibom in Search Console: detecting corporate website compromise
Unusual gambling queries in Google Search Console indicate website compromise via cloaking. Learn how to detect hidden S...