Work Samples

Methodology for mapping MITRE ATT&CK techniques to control environments in financial services, with evidence-based coverage validation.

Operationalizing the Cyber Risk Institute Profile for community banks — gap analysis methodology with quantified coverage ratings.

Evidence portfolio spanning three governance layers — operational, strategic, and regulatory — with real-world AI audit scenarios.

Analysis outputs delivered into SharePoint and MS Lists via Power Automate — not Excel attachments. Findings, controls, and risk tracking live where the organization works.

Two-layer validation framework — reasoning validation grounded in source material, and controls validation mapped to MITRE mitigations.