29 July 2026 · By P LarnerBlog post
From Scanner Output to Risk Register Connecting Vulnerability and Risk Management
How to turn thousands of scanner findings into a handful of thematic, owned risks your register can actually carry.
Read more →BLOG
From the practitioner's desk
Notes on GRC, compliance frameworks and running it all inside your own network.
3 posts found
28 July 2026 · By P LarnerBlog post
Why Asset Management Is the Foundation of Everything in Security
You cannot protect, patch or monitor what you do not know you have. Every security discipline quietly assumes an accurate list of systems exists, and in most organisations that assumption is wrong. This post explains why every serious framework puts asset management first and how to build a register that actually works.
Read more →25 July 2026 · By P LarnerBlog post
How to Prepare for a Compliance Audit Without the Panic
How to prepare for a compliance audit: evidence hygiene through the year, control narratives, common findings, and an internal dry run before the real thing.
Read more →