Quirk Threat Modelling (QTM)
Here is how to quickly and accurately identify threats to a system. I have developed the Quirk Threat Modelling (QTM) […]
Quirk Threat Modelling (QTM) Read Post »
Here is how to quickly and accurately identify threats to a system. I have developed the Quirk Threat Modelling (QTM) […]
Quirk Threat Modelling (QTM) Read Post »
Let me share my experience of renewing Google PCA certification in May 2026. It’s been two years since I obtained
Google Professional Cloud Architect Renewal Read Post »
I struggled, but defended my AWS Security Specialty qualification in August 2025. Let me share my experience of taking the
AWS Security Specialty Certificaton Read Post »
Security of a solution is not the sum of the security of its parts. Imagine a jet engine in isolation
Security Composition Fallacy Read Post »
Let me share my experience of obtaining Google Professional Cloud Security Engineer certification in June 2025. I already have GCP
Google Professional Cloud Security Engineer Certification Read Post »
In this article I will share my experience and thoughts about Security Architect career path. I will outline skills required
How to become a Security Architect Read Post »
What does a Cyber Security Architect do and how to become one? Cyber Security Architect role is a bit mysterious
Security Architect Role Read Post »
How do passkeys work? What’s in it for you? Are there any gotchas? Short answer Passkey authenticators work somewhat similarly
Passkeys – how do they work and who needs them? Read Post »
Customer managed keys for encryption at rest are not as good as they sound. You are probably familiar with the
Demystifying Encryption at Rest with Customer Managed Keys Read Post »