118xBanin18xban.hashnode.dev·2h ago · 16 min readThe Evidence Chain Map@18xBan · GRC Series · Chapter 07 6 links from "we do this" to "here's the proof." 4 were broken, and the other 2 were weak. Monday, 8:50 AM: "Show us, don't tell us" The email from Gotham Mutual's00
118xBanin18xban.hashnode.dev·5h ago · 15 min readControl Ownership Without Theatre@18xBan · GRC Series · Chapter 06 Eighteen controls on Wayne's list, and not one owner who'd been told. Monday, 9:05 AM: "Password resets are broken" The first support ticket lands in Deskline at 900
118xBanin18xban.hashnode.dev·1d ago · 18 min readData Flow Mapping With Trust Boundaries@18xBan · GRC Series · Chapter 05 One diagram from 2022, five boxes, and no arrows leaving AWS. Monday, 8:47 AM: "Where else has it been?" Dan forwards an email from Wayne's outside legal counsel. 00
118xBanin18xban.hashnode.dev·1d ago · 14 min readData Classification That People Actually Follow@18xBan · GRC Series · Chapter 04 Zero labels, zero data owners, and two copies of customer data in places they shouldn't be. Tuesday, 9:31 AM: "So what's actually in it?" The closure of hackathon-00
118xBanin18xban.hashnode.dev·2d ago · 15 min readAsset Inventory: From Unknown to Auditable@18xBan · GRC Series · Chapter 03 Seven accounts, 203 computers, 171 spreadsheet rows, and nobody who could say what any of it was. Monday, 10:07 AM: "Closing it today, cool?" Last Friday, Maya app00
