Tag: Compliance
All the articles with the tag "Compliance".
Selecting more than one tag in the sidebar shows only posts that have every selected tag.
- #OSCAL#Policy as Code#Compliance
Converting the Web3 Key Management Policy to OSCAL
How a Markdown key management policy becomes a machine-readable OSCAL Catalog: the mapping rules, the JSON shape, schema validation, and what's left unmapped.
4 min read - #Key Management#Vault#Hoodi
Where the Web3 Key Management Policy Is Already Implemented in My Hoodi Validator
Mapping specific clauses of the Web3 Cryptographic Key Management Policy against the Vault-based secret design already running in my Hoodi validator, and being honest about the gaps.
5 min read - #NIST#NIST SP 800-57#NIST SP 800-131A
NIST SP 800-57 and SP 800-131A in the Web3 Key Management Policy
How the Web3 Cryptographic Key Management Policy uses NIST SP 800-57 Part 1 and SP 800-131A, and why clause-level mapping is still open work.
3 min read - #Pipeline Controls#Private Repository#DevSecOps
Private Repositories Security Review Process
A practical process for reviewing, approving, and continuously reassessing third-party artifacts before internal use.
4 min read - #Security Requirements Plugin#Security Design#Security Requirements
Security Requirements Plugin: First Security Activity
Claude plugin that derives security requirements from service descriptions and reviews security design.
10 min read