Anti-fraud in telecom: integrating billing and softswitch
How to build low-latency integration of the signaling core, billing, and anti-fraud systems to block IRSF and other fraud in real time.
Serhiy Balashuk 7 min read
CONTROLLED FINANCE
Information Security
Practical guidance on management accounting, budgeting, treasury, period close, financial controls and evidence-based AI.
Choose a topic
61 publications
Serhiy Balashuk 7 min read
Architecture of carrier SIP routing: protecting voice cores from fraud
We examine carrier SIP routing architecture and methods for protecting voice cores from fraud by integrating MNP, billing systems, and cryptographic verification.
Serhiy Balashuk 6 min read
Anatomy of cloud billing: why budgets leak
Cloud budget control is a continuous architectural process. We analyze budget leaks, FinOps implementation, and practical infrastructure optimization tools.
Serhiy Balashuk 6 min read
Multi-cloud and hybrid infrastructure: when it makes sense
Analyzing a pragmatic approach to multi-cloud and hybrid architectures: how to avoid operational complexity traps, implement FinOps, and secure the organizational perimeter.
Yuriy Syvytsky 6 min read
Scaling AI-assisted development in enterprise: from code generation to engineering discipline
By 2027, successful AI adoption in development will depend not on code generation speed, but on integrating AI tools into controlled testing, security, and architectural oversight processes.
Anton Marrero 7 min read
AI in cybersecurity 2027: from perimeter defense to semantic DLP filters
How to protect corporate LLM integrations from data leaks and new attack vectors using NIST AI RMF, MITRE ATT&CK frameworks, and Security by Design architecture.
Serhiy Balashuk 6 min read
Incident response: the first 24 hours and regulatory requirements
How to balance technical cyberattack containment with strict compliance reporting requirements during the critical first 24 hours after threat detection.
Anton Marrero 7 min read
The compliance trap: why SIEM and certification do not guarantee operational resilience
We analyze common pitfalls in implementing monitoring tools and certifications without making real changes to daily security team processes.
Mykhailo Vyhovsky 6 min read
Security assessment and roadmap using NIST CSF 2.0
How to transition from chaotic protection to systemic resilience, identify hidden gaps, and implement targeted solutions that limit the blast radius without replacing the entire IT infrastructure.
Anton Marrero 5 min read
Building noise-free security monitoring with SIEM, SOC, and SOAR
A practical approach to overcoming SOC alert fatigue through MITRE ATT&CK mapping, SOAR automation, and NIST CSF 2.0 business prioritization.
Serhiy Balashuk 7 min read
Zero Trust for legacy systems: protection architecture via IAP and microsegmentation
How to protect legacy infrastructure from unauthorized access and lateral movement without major code refactoring using Identity-Aware Proxy and microsegmentation.
Yuriy Syvytsky 6 min read
Integrating NIS2, ISO/IEC 27001, and KSZI requirements
Combining NIS2 directives, ISO/IEC 27001 processes, and KSZI requirements without redundant workflows. A practical approach to security architecture.
Serhiy Balashuk 6 min read