Consultant: Samuel Adeoluwa Okunribido
Focus: Governance, Risk Management, and Regulatory Compliance
This repository serves as a centralized hub for technical security assessments and GRC deliverables. Unlike standard development projects, these engagements focus on translating technical vulnerabilities into business risk and providing strategic remediation roadmaps aligned with global industry standards.
- Framework Alignment: NIST CSF, NIST 800-53, ISO 27001, PCI-DSS.
- Risk Management: Quantitative and Qualitative risk analysis (SLE, ALE, Impact vs. Likelihood).
- Application Security: OWASP Top 10 auditing and SDLC governance.
- Audit & Reporting: Executive-level communication and technical control validation.
| Engagement Name | Key Frameworks | Technical Focus |
|---|---|---|
| Web Application Risk Audit | OWASP, NIST 800-53 | Broken Access Control, SQLi, Cryptographic Failures |
| Infrastructure Compliance Scan | CIS Controls, PCI-DSS | Service Enumeration, Port Security, Asset Inventory |
| [Future Engagement Name] | Pending | Network Hardening & Governance |
Every project in this repository follows a standardized, business-aligned workflow:
- Scoping & Discovery: Defining engagement parameters and asset inventory.
- Technical Validation: Utilizing industry tools (Burp Suite, Nmap, Kali) to verify control effectiveness.
- Risk Quantification: Analyzing the financial and operational impact of identified flaws.
- Remediation Strategy: Mapping findings to specific NIST/ISO controls and providing a prioritized roadmap.
The contents of this repository are for professional demonstration purposes. All assessments are performed in controlled, isolated environments. Methodologies are designed to validate compliance and reduce organizational risk without disrupting business operations.