Exploring Security From Principles to Practice
Understanding why security exists, the people and value it serves, the risks it addresses, and how security principles hold up when tested in practice.
Testing Security Concepts
Security should not begin with a technology or control. It begins with understanding what we value, who that value serves, the ethical responsibilities involved, and the risks that could prevent those objectives from being achieved.
Testing Security Concepts is where I examine those foundations, translate theory into practical questions, test them where appropriate, observe the evidence and document what I learn — including where my original understanding proves incomplete.
From Concept to Practice
01 Understand
Principle, purpose, and value
02 Question
Why, problem and assumptions
03 Test
Reproduce it in the lab
04 Observe
Collect logs and evidence
05 Analyze
Explain what happened
06 Apply
Connect findings to practice
Latest Security Notes
Current notes, observations and lessons from security concepts I am studying, testing and investigating.
-
TSC-001 — Must Ethics Precede the CIA Triad?
Opening Thought Before asking what must come first, I needed to understand what ethics and the CIA triad represent. I chose to…