The Blog

v3.9.2 brings the Estonian E-ITS framework, MITRE ATT&CK v18.1, Chinese (Simplified) translation, richer asset exports, and quality-of-life fixes for IdP and policy management.

Kicking off 2026 with session security hardening after 2FA enrollment, audit performance improvements, and better implementation group handling.

Summary of our ongoing research on accelerating the creation of consistent frameworks mappings

Mon ambition avec cette fiche est de retenir les points essentiels de cet ouvrage, devenu une référence pour la quantification du risque cyber. La première édition est parue en 2016, et la deuxième édition de 2023 approfondit et actualise les concepts.

Heat maps aren’t evil but limited. Quantitative risk assessment is always preferable when feasible

Operational GRC transforms traditional governance by focusing on actionable security measures. This approach integrates GRC directly into daily operations, enhancing data-driven decision-making and operational efficiency.