CONTROLLED FINANCE
Practical guidance on management accounting, budgeting, treasury, period close, financial controls and evidence-based AI.
78 publications
How to transition from chaotic protection to systemic resilience, identify hidden gaps, and implement targeted solutions that limit the blast radius without replacing the entire IT infrastructure.
Anton Marrero5 min readA practical approach to overcoming SOC alert fatigue through MITRE ATT&CK mapping, SOAR automation, and NIST CSF 2.0 business prioritization.
Serhiy Balashuk7 min readHow to protect legacy infrastructure from unauthorized access and lateral movement without major code refactoring using Identity-Aware Proxy and microsegmentation.
Yuriy Syvytsky6 min readCombining NIS2 directives, ISO/IEC 27001 processes, and KSZI requirements without redundant workflows. A practical approach to security architecture.
Serhiy Balashuk6 min readMoving from chaotic software procurement to systematic cyber resilience through threat modeling, architectural controls, and Security by Design principles.
Mykhailo Vyhovsky7 min readCloaking hides signs of website compromise by displaying spam content only to search bots. We analyze the threat mechanics and detection methods using Google Search Console.
Mykhailo Vyhovsky8 min readA practical guide for CISOs and IT administrators on turning employee termination into a controlled security process with auditing and access revocation.
Serhiy Balashuk9 min readHow to secure legacy ERP systems without rewriting code. Implement Zero Trust using IAP, PAM, and microsegmentation to mitigate access risks effectively.
Anton Marrero10 min readBuilding real enterprise cyber resilience in the NIS2 era, avoiding paper audit traps, and protecting infrastructure through Security by Design.
Yuriy Syvytsky7 min readIndustrial IoT provides production data for analytics and predictive maintenance, but it also exposes OT systems to new risks. A practical approach involves standardizing data exchange via OPC UA, building cybersecurity based on ISA/IEC 62443, and never treating any protocol as a substitute for netw
Mykhailo Vyhovsky8 min readGeopatriation and sovereign cloud are emerging as responses to regulatory requirements and cyber risks. This article explains when relocating workloads is justified.
Anton Marrero7 min readCERT-UA warns of the activation of UAC-0057 with new tools OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, requiring public organizations to strengthen their cyber defenses.
Yuriy Syvytsky5 min read
