๐Review Incoming...
This week, we dive into GRC. Andrew Chrostowski provides a Hall of Fame Rec for ๐๐๐ ๐พ๐ฎ๐๐๐ง๐จ๐๐๐ช๐ง๐๐ฉ๐ฎ ๐๐ช๐๐๐ ๐ฉ๐ค ๐๐ค๐ซ๐๐ง๐ฃ๐๐ฃ๐๐, ๐๐๐จ๐ , ๐๐ฃ๐ ๐พ๐ค๐ข๐ฅ๐ก๐๐๐ฃ๐๐ by Jason Edwards and Griffin Weaver.
Andrew's review ๐ https://cybercanon.org/the-cybersecurity-guide-to-governance-risk-and-compliance/
0541 ฮคฮฮฮกฮฮฮฃ ฮคฮฮฃ ฮฮฮฮฮฃฮฃฮฮฃ -TIGRES DEL MAR-
Serie: Mar
Paรญs: GRC
Fab/Dist: TENCO, EXIN
Aรฑo: 1984
Mรกs info en: https://refstente.com/id/1318
#TENTE #RefsTENTE #TENCO #EXIN #Serie_Mar #GRC #Aรฑo_1984 #Marรญtimo #Militar #Mar_Militar #Color_Gris #Ref_0541
24 hours until the CfP for "Security BSides Knoxville 2026" closes: https://papercall.io/cfps/6517/submissions/new
#cfp #conference #Offensive security #Defensive security #Application security #Intelligence #Malware #Exploit development #Social engineering #Security management #Grc #Ciso #Dfir #Soc #Osint #Breaking into industry #Physical pen testing #Body hacking #Red team #Blue team #Human factors #Hardware #Soft skills #Management #Appsec #Ics/scada
๐ญ Everyday you are interacting with Cybersecurity...
https://www.youtube.com/@BlacksInCybersecurityโ โ โ
#BlacksInCyber #BICPodcast #LitLikeBIC #BlacksInCybersecurity #WomenInCyber #GRC
๐ญ Everyday you are interacting with Cybersecurity...
https://www.youtube.com/@BlacksInCybersecurityโ โ โ
#BlacksInCyber #BICPodcast #LitLikeBIC #BlacksInCybersecurity #WomenInCyber #GRC
Elodie is pretty sure no one here has been through this process (grc overseas route)?
She started (again) the application process yesterday, having finally got all the docs certified etc, only to find that there is no longer a specific overseas route form on the gov website.
She doesnโt know when this changed ๐คฆโโ๏ธ๐คทโโ๏ธ
A search found a few references to the forms but all the links are broken.
Applying for the DE SBGG took months because the rules didnโt understand the specific situation (the lovely lady at the Standesamt who was dealing with elodie was dogged in her determination tho ๐)
Fuck ๐ฟ
๐ญ AI Governance in GRC?
https://www.youtube.com/@BlacksInCybersecurityโ โ โ
#BlacksInCyber #BICPodcast #LitLikeBIC #BlacksInCybersecurity #WomenInCyber #GRC
๐ญ AI Governance in GRC?
https://www.youtube.com/@BlacksInCybersecurityโ โ โ
#BlacksInCyber #BICPodcast #LitLikeBIC #BlacksInCybersecurity #WomenInCyber #GRC
Removing users is easy - removing their access ghosts ๐ป takes discipline
#CyberSecurity #RiskManagement #Infosec #Compliance #GRC #CyberResilience #ITSecurity #CyberRisk #CyberAwareness #SecurityLeadership #BusinessContinuity #RiskAssessment #ISMS #ISO27001 #CISO
Something shifted quietly in AI governance.
Colorado's AI Act gives organizations an affirmative defense if they can show compliance with the NIST AI Risk Management Framework or ISO 42001 โ meaning a voluntary framework now reduces legal liability.
For nonprofits and small teams, this reframes the question. It's not "do we have capacity for AI governance." It's "what does a defensible posture actually require."
https://www.linkedin.com/posts/carlosrmunozjr_aigovernance-aireadiness-grc-share-7437218111625490433-RQ90
#AIPolicy #GRC #Compliance
Voluntary frameworks just became legal armor. That changes the math for every organization still treating AI governance as optional. Colorado's AI Act includes an affirmative defense clause. Organizations that can demonstrate compliance with the NIST AI Risk Management Framework โ a structured, government-developed tool for identifying and managing AI-related risks โ or ISO 42001, its international counterpart, can use that compliance to reduce liability exposure when a violation is discovered. That is not a policy recommendation. That is a statute. For years, the pitch for AI governance frameworks was built around trust, maturity, and "responsible AI." Legitimate arguments. But not urgent ones for a team of twelve running a nonprofit or a compliance lead at a regional SME already stretched thin. Here's what changes when a framework becomes a legal safe harbor: it stops being aspirational and starts being actuarial. The practical question isn't whether to implement. It's what a defensible posture actually requires โ documented controls, an AI impact assessment on record, clear human oversight responsibilities, evidence of continuous review. Not perfection. Defensibility. Colorado set this precedent. Other states are watching. What does your organization's AI governance posture look like if a regulator โ or a plaintiff's attorney โ asked to see it today? #AIGovernance #AIReadiness #GRC #RiskManagement #Compliance
CyberCanon
RefsTENTE
Calling all papers
BIC Village & CTF
Blacks In Cybersecurity HQ 
Elodie chaos ๐๐๐ณ๏ธโโง๏ธ
ODIT
CRMunoz