Framework & Regulatory Knowledge

Web application security risk categories, applied directly to structure secure code review and remediation guidance in professional AppSec work.

Common weakness enumeration, used alongside OWASP Top 10 in professional code review.

Cybersecurity risk-management framework, part of CompTIA Security+ domain knowledge.

Adversary tactics/techniques taxonomy, applied in red-team and threat-intel work.

Layered-controls security design principle, applied and measured directly in the LLM Data Leakage Lab and the Three-Layer Defense Framework.

Never-trust-by-default access model, applied through server-side identity resolution and least-privilege IAM provisioning across professional roles.

A defense strategy that changes system behavior to reduce attacker predictability -- the subject of Amalachukwu's MSc research at the University of Guelph.

US framework for managing AI risk across the Map/Measure/Manage/Govern functions -- applied in the Attack → Defend → Govern Lab's governance workbench and in published analysis of AI transparency in customer service.

International standard for AI management systems, referenced in AI governance analysis and coursework.

Intergovernmental principles for trustworthy AI, referenced in AI governance analysis and coursework.

EU regulation for AI systems, risk-tiered by use case -- referenced as emerging regulatory direction in AI governance analysis.

Building privacy protection into systems from the outset, covered in the University of Guelph Data Privacy, Security and Governance micro-credential.