https://drawn2security.com 2026-10-08T06:38:58.086Z weekly 1 https://drawn2security.com/categories 2026-10-08T06:38:58.086Z weekly 0.7 https://drawn2security.com/explore 2026-10-08T06:38:58.086Z weekly 0.7 https://drawn2security.com/start-here 2026-10-08T06:38:58.086Z weekly 0.7 https://drawn2security.com/about 2026-10-08T06:38:58.086Z weekly 0.7 https://drawn2security.com/categories/identity-access 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/vulnerability-management 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/networks 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/ai-security 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/incident-response 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/data-protection-privacy 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/detection-soc 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/architecture-resilience 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/application-security 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/ot-ics-cyber-physical 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/software-supply-chain-devsecops 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/governance-risk 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/cloud-security 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/human-factors-social-engineering 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/cryptography 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/threat-actors-att-ck 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/containers-kubernetes 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/malware-ransomware 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/api-security 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/metrics-decisions-economics 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/supply-chain-third-parties 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/email-browser-security 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/frameworks-standards 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/everyday-cyber-digital-life 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/security-fundamentals 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/categories/security-leadership-culture 2026-10-08T06:38:58.086Z weekly 0.6 https://drawn2security.com/sketches/cia-triad 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/assume-breach 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/attack-surface 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/compensating-control 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/complexity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/control 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/residual-risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-appetite 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secure-defaults 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/trust-boundary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/vulnerability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mfa 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/pam 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/account-recovery 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/authentication 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/authorisation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/credential-stuffing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/identity-proofing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/joiner-mover-leaver 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/just-in-time-access 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/least-privilege 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/passkeys 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/password-managers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/password-spraying 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/passwords 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/phishing-resistant-mfa 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privileged-accounts 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secrets-management 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/service-accounts 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/session-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/saas-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-iam 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-audit-logs 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-concentration 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-egress 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-incident-response 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-key-rotation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-keys 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-misconfiguration 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-posture-management 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ephemeral-infrastructure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/metadata-services 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/multi-cloud 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/public-storage 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-groups 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/serverless-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shadow-cloud 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shared-responsibility 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tenant-isolation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/workload-identity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-agents 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-data-leakage 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-guardrails 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-hallucinations 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-identity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-monitoring 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-red-teaming 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-enabled-social-engineering 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-generated-code 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/agent-permissions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/indirect-prompt-injection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/model-inversion 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/model-supply-chains 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/model-theft 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/prompt-injection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shadow-ai 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/training-data-poisoning 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/idor-bola 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/sast 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/sql-injection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ssrf 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/broken-access-control 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/business-logic-abuse 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/code-review 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cross-site-scripting 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dependency-confusion 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/fuzzing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/injection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/insecure-design 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mass-assignment 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/resource-exhaustion 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secure-coding 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-misconfiguration 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-testing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/vulnerable-dependencies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/api-abuse 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/api-authentication 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/api-authorisation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/api-gateways 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/api-inventory 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/api-keys 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/api-observability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/graphql-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/oauth-scopes 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/excessive-data-exposure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/machine-to-machine-trust 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rate-limits 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/schema-validation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/unsafe-consumption-of-apis 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/versioning 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/webhooks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ci-cd 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/branch-protection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/code-signing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dependency-pinning 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/developer-credentials 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/developer-experience 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ephemeral-runners 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/package-registries 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/provenance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/release-approvals 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secret-scanning 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-champions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-gates 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shift-left 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/source-control 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cve 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cvss 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cvss-base-score 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cvss-environmental-metrics 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cvss-threat-metrics 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/asset-criticality 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/emergency-patching 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/end-of-life-software 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/exploitability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/exposure-management 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/false-negatives 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/false-positives 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/known-exploited-vulnerabilities 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/n-days 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/patching 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/remediation-slas 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/scanner-coverage 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/virtual-patching 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/vulnerability-backlog 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/zero-days 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/change-management 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/chaos-engineering 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/common-mode-failure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/configuration-drift 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/default-credentials 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dependency-mapping 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/fail-secure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/graceful-degradation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hardening 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/high-availability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/legacy-systems 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/redundancy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/remote-administration 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/resilience 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secure-decommissioning 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/iocs 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/siem 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/soar 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/soc 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/soc-automation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/alert-fatigue 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/behavioural-detection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/detection-coverage 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/detection-engineering 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/log-retention 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/logging 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mean-time-to-detect 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/signal-and-noise 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-hunting 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-intelligence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/time-synchronisation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/triage 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rpo 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rto 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/chain-of-custody 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/containment 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/crisis-management 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/decision-authority 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/forensic-preservation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/incident-communications 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/incident-response-lifecycle 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/lessons-learned 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/playbooks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ransom-decisions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/restoration-testing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/root-cause 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-events 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/short-term-containment 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tabletop-exercises 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dlp 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/anonymisation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-breach-impact 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-classification 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-lifecycle 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-masking 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-minimisation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-ownership 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-retention 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-sovereignty 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/employee-monitoring 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privacy-by-design 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/production-data-in-testing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/pseudonymisation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/purpose-limitation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secrets-in-logs 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shadow-data 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/telemetry-privacy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tokenisation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hsms 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/certificate-authorities 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/certificate-expiry 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/crypto-agility 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cryptographic-trust 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/digital-signatures 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/encryption 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/encryption-at-rest 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/encryption-in-transit 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/forward-secrecy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hashing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/key-management 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/key-rotation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/nonce-reuse 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/password-hashing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/peppers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/post-quantum-cryptography 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/public-key-cryptography 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/randomness 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/salts 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ddos 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dns 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dns-tunnelling 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/nac 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tls 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/vpns 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/wi-fi-evil-twins 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/air-gaps 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/certificate-validation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/east-west-traffic 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/firewalls 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/lateral-movement 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/man-in-the-middle 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/microsegmentation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/network-monitoring 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/remote-access 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/segmentation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/kubernetes-rbac 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/kubernetes-secrets 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/admission-control 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cluster-admin 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/container-escape 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/container-images 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/containers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ephemeral-containers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/image-provenance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/image-scanning 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/namespace-isolation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/network-policies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/orchestrator-control-plane 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/pod-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/runtime-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/sidecars 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ci-cd-secrets 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/sboms 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/fourth-party-risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/maintainer-burnout 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/open-source-risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/right-to-audit 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secure-by-design 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-questionnaires 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/supplier-access 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/supplier-offboarding 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/supply-chain-attacks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/third-party-risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/transitive-dependencies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/vendor-concentration 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/vendor-due-diligence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/assurance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/board-reporting 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/compliance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/control-effectiveness 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cyber-governance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cyber-insurance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/exceptions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/policy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-acceptance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-owners 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-registers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-transfer 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-metrics 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/segregation-of-duties 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/standards 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/three-lines-model 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/capec 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cis-controls 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cwe 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cyber-essentials 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/iso-27001 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mitre-att-ck 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/nist-csf 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/owasp-api-top-10 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/owasp-top-10 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ssdf 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/benchmarking 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/control-catalogues 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/maturity-models 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-modelling-frameworks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/zero-trust-architecture 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/qr-phishing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/authority-bias 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/business-email-compromise 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/consent-phishing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/deepfakes 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/help-desk-social-engineering 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/out-of-band-verification 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/phishing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/pretexting 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/reporting-culture 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-awareness 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-fatigue 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shoulder-surfing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/spear-phishing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tailgating 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/urgency 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/usable-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/edr 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/allowlisting 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/backup-isolation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/botnets 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/command-and-control 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-exfiltration 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-theft-extortion 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/endpoint-isolation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/immutable-backups 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/living-off-the-land 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/malware 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/persistence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ransomware 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rootkits 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/sandboxing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/viruses 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/adversary-emulation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/attack-chains 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/credential-access 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cybercrime-economics 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/defence-evasion 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hacktivism 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/impact 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/initial-access 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/initial-access-brokers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/insider-threat 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/nation-state-operations 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/opportunistic-attacks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privilege-escalation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ransomware-as-a-service 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-actors 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/budgeting 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/executive-sponsorship 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/psychological-safety 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-communication 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-roi 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-burnout 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-culture 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-incentives 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-roadmaps 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-staffing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-theatre 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/goodhart-s-law 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mcnamara-fallacy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/averages 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/base-rates 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cost-of-controls 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cost-of-incidents 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/decision-thresholds 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/false-precision 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/leading-indicators 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/loss-expectancy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/probability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-quantification 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-scorecards 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/uncertainty 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ot-incident-response 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ot-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/plc-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/scada 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/usb-in-ot 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/asset-discovery-in-ot 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/converged-it-ot 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/engineering-workstations 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/historian-servers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/industrial-protocols 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/legacy-controllers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/patching-ot 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/physical-process-impact 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/remote-vendor-access 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/safety-and-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/safety-systems 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/segmentation-in-ot 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/app-permissions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/backups 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/browser-extensions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/children-s-online-safety 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/device-locks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/digital-legacy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/lost-devices 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/online-shopping 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privacy-settings 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/public-wi-fi 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/scams 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/smart-home-devices 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/social-media-privacy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/software-updates 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mfa-stops-phishing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/password-sticky-notes-are-always-bad 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/vpn-means-secure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/humans-are-the-weakest-link 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hackers-always-wear-hoodies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/compliance-means-secure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/macs-do-not-get-malware 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/air-gaps-cannot-be-hacked 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-high-cvss-means-patch-first 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/open-source-is-less-secure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/session-lifetime-is-a-security-decision 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/step-up-authentication-protects-sensitive-moments 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/machine-identities-need-owners-too 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/password-length-beats-decorative-complexity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/forced-rotation-can-create-predictable-passwords 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/salts-make-identical-passwords-look-different 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/every-secret-copy-creates-another-secret-to-protect 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secrets-in-source-control-have-a-long-memory 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/environment-variables-are-not-secret-vaults 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/temporary-credentials-shrink-the-theft-window 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secret-scanning-finds-exposure-not-erasure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/least-privilege-decays-over-time 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/break-glass-access-should-be-exceptional-and-noisy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privilege-boundaries-matter-more-than-job-titles 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/permission-inheritance-can-hide-excessive-access 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/wildcard-permissions-widen-blast-radius 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/deny-rules-can-create-hard-guardrails 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/admin-tools-are-part-of-the-privileged-access-path 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/delegation-creates-chains-of-trust 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/entitlement-reviews-need-business-context 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/oauth-consent-is-not-proof-of-identity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/token-scope-defines-capability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/bearer-tokens-behave-like-cash 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/sso-concentrates-convenience-and-consequence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/federation-shifts-where-trust-lives 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/redirect-uri-validation-protects-token-delivery 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/token-audience-prevents-universal-reuse 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/token-revocation-is-harder-than-password-change 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/workload-federation-can-remove-stored-cloud-keys 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dkim-protects-signed-content-against-later-modification 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dmarc-depends-on-alignment 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/forwarding-can-break-email-authentication-assumptions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-display-name-is-not-an-email-address 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/reply-chain-hijacking-borrows-existing-trust 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secure-email-gateways-see-only-traffic-that-reaches-them 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/quarantine-creates-a-second-security-decision 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/authenticated-email-can-still-be-malicious 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mailbox-rules-can-become-persistence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dns-is-a-directory-not-proof-of-safety 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dnssec-signs-answers-but-does-not-hide-them 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/encrypted-dns-protects-the-resolver-path-not-the-destination 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/registrar-compromise-can-outrank-server-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/registrar-locks-add-friction-to-domain-theft 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dangling-dns-can-point-to-somebody-else-s-resource 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/subdomain-takeover-begins-with-abandoned-ownership 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/split-horizon-dns-gives-different-users-different-maps 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/caa-narrows-who-may-issue-certificates 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/certificate-transparency-makes-issuance-observable 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/bgp-announces-reachability-not-truth 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/bgp-hijacking-can-redirect-traffic-before-applications-see-it 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/route-leaks-can-be-accidental-and-disruptive 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rpki-validates-route-origins-not-the-whole-path 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/more-specific-internet-routes-usually-win 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/anycast-sends-one-address-to-multiple-places 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/route-filtering-is-internet-hygiene 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/internet-paths-can-change-without-applications-changing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/control-plane-attacks-can-break-data-plane-assumptions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tls-encrypts-a-connection-not-endpoint-intentions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/certificates-bind-keys-to-names-through-trust-chains 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/certificate-expiry-creates-operational-pressure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/private-key-compromise-survives-a-valid-certificate 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hsts-removes-the-insecure-choice-after-a-browser-has-learned-the-policy-while-preload-can-protect-the-first-visit-too 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ocsp-stapling-moves-status-evidence-closer 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mutual-tls-authenticates-both-ends 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tls-termination-moves-the-trust-boundary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/certificate-pinning-trades-flexibility-for-tighter-expectations 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/pki-can-fail-operationally-while-cryptography-is-sound 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/csrf-abuses-an-authenticated-browser 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/xss-turns-trusted-pages-into-script-delivery 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/output-encoding-is-context-specific 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/path-traversal-escapes-the-intended-file-area 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/file-upload-security-is-more-than-extension-checking 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/open-redirects-lend-trusted-domains-to-phishing 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-headers-shape-browser-behaviour 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shared-api-keys-give-coarse-identity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rate-limits-are-resource-controls-not-identity-controls 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/old-api-versions-can-preserve-old-weaknesses 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/schema-validation-narrows-what-an-api-interprets 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/graphql-depth-can-become-a-resource-attack 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/webhook-signatures-authenticate-provider-messages 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/idempotency-prevents-retries-becoming-duplicates 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/same-origin-policy-limits-which-pages-can-read-each-other 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cors-relaxes-browser-reading-rules-not-authentication 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/samesite-cookies-reduce-some-cross-site-request-risks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/browser-extensions-inherit-powerful-visibility 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/local-storage-is-convenient-not-a-secure-vault 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/content-security-policy-constrains-script-sources 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/clickjacking-hides-the-real-control-beneath-the-click 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/autofill-changes-the-phishing-surface 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/client-side-validation-is-not-a-security-boundary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/origin-means-scheme-host-and-port-together 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-roles-can-replace-copied-long-lived-keys 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/resource-policies-create-a-second-authorisation-surface 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/permission-boundaries-cap-delegated-power 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/organisation-guardrails-prevent-dangerous-local-choices 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cross-account-trust-expands-the-identity-perimeter 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/console-access-and-workload-access-are-different-paths 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/unused-cloud-permissions-are-latent-attack-paths 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/iam-conditions-add-context-to-permissions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/organisation-guardrails-limit-access-but-do-not-grant-it 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/multi-region-is-not-the-same-as-multi-provider 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/autoscaling-can-scale-a-failure-too 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/managed-services-move-responsibility-not-all-risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/private-networking-does-not-automatically-mean-trusted 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/egress-is-part-of-the-cloud-security-boundary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/snapshots-can-copy-sensitive-data-silently 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/serverless-still-has-an-attack-surface 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/infrastructure-as-code-makes-mistakes-reproducible 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/resilience-tests-should-include-control-plane-failure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-container-is-isolation-not-a-tiny-virtual-machine 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/kubernetes-rbac-controls-api-actions-not-what-a-running-container-can-then-do 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-pod-service-account-is-an-identity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/networkpolicy-needs-an-enforcement-engine 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/admission-control-can-stop-risky-objects-before-they-run 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privileged-containers-weaken-the-host-boundary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mutable-image-tags-can-move-underneath-you 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cluster-admin-has-a-very-large-blast-radius 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-trusted-build-can-faithfully-ship-malicious-source 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dependency-confusion-exploits-naming-and-resolution 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/typosquatting-attacks-developer-attention 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/lockfiles-improve-repeatability-not-eternal-safety 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/transitive-dependencies-enlarge-unseen-trust 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/maintainer-compromise-can-use-the-normal-release-channel 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/build-secrets-should-not-become-build-artefacts 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/reproducible-builds-make-unexpected-differences-visible 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-deployment-pipeline-is-a-privileged-production-path 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/code-review-does-not-protect-a-compromised-runner 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/forked-code-should-not-automatically-receive-secrets 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/branch-protection-does-not-protect-every-release-path 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/deployment-credentials-should-match-deployment-scope 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/build-logs-can-become-secret-leaks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/self-hosted-runners-inherit-local-trust 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/release-signing-depends-on-protecting-signing-keys 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/pipeline-dependencies-are-code-execution-dependencies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rollback-needs-the-same-security-as-rollout 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/kev-epss-and-ssvc-turn-exploitation-evidence-and-likelihood-into-different-prioritisation-signals 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/patch-available-does-not-mean-patch-deployed 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/asset-inventory-bounds-vulnerability-truth 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/compensating-controls-can-change-exploitability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/patch-windows-are-risk-decisions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/end-of-life-software-turns-patching-into-replacement 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/vulnerability-closure-needs-verification 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/the-internet-sees-what-you-expose-not-what-your-cmdb-remembers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-new-subdomain-can-create-a-new-perimeter 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shadow-it-becomes-shadow-attack-surface 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/acquisitions-merge-attack-surfaces-before-inventories 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/internet-exposure-is-a-property-that-changes 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-forgotten-test-system-can-be-a-production-entry-point 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/third-party-hosted-assets-still-carry-your-name 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/attack-surface-reduction-removes-paths-instead-of-adding-alerts 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ipv6-can-create-exposure-beside-an-ipv4-mental-model 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/exposure-without-ownership-stays-exposed-longer 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ransomware-is-often-the-last-stage-not-the-first 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/backups-are-ransomware-targets 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/lateral-movement-turns-one-foothold-into-many 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/command-and-control-gives-malware-an-operator 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/persistence-is-about-surviving-change 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/living-off-the-land-reduces-new-tool-visibility 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ransomware-recovery-is-an-identity-problem-too 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/encryption-speed-is-not-the-only-ransomware-impact 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/edr-visibility-depends-on-the-sensor-being-alive 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/application-allowlisting-controls-execution-not-intent 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/local-admin-changes-the-consequence-of-compromise 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/device-compliance-is-a-snapshot-not-permanent-health 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/full-disk-encryption-protects-a-powered-off-device-best 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/usb-controls-are-a-system-design-problem 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/patch-compliance-percentages-can-hide-critical-exceptions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/endpoint-isolation-buys-investigation-time 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/reimaging-removes-software-not-stolen-credentials 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-agents-can-become-privileged-attack-surfaces 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/segmentation-limits-paths-not-compromise-itself 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/every-firewall-allow-rule-creates-a-permitted-path 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/flat-networks-turn-local-trust-into-broad-reachability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/microsegmentation-moves-boundaries-closer-to-workloads 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/management-paths-can-bypass-segmentation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/default-deny-makes-new-paths-deliberate 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/network-zones-should-reflect-trust-and-function 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/segmentation-needs-tested-failure-behaviour 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/encrypted-traffic-still-needs-network-policy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/zero-trust-removes-implicit-trust-in-network-position-not-confidence-in-colleagues 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/continuous-evaluation-means-decisions-can-change 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/policy-enforcement-depends-on-reliable-identity-signals 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/zero-trust-does-not-remove-network-controls 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/service-to-service-traffic-needs-identity-too 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/device-trust-should-match-what-is-actually-measured 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/policy-engines-create-critical-dependencies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/zero-trust-migration-is-dependency-discovery 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-log-records-an-observation-not-objective-truth 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/central-logging-reduces-local-erasure-risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/verbose-logging-can-leak-secrets 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/retention-determines-how-far-back-you-can-investigate 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/telemetry-coverage-should-map-to-detection-questions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/parsing-errors-can-silently-break-detections 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/high-volume-logs-can-hide-high-value-events 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/audit-logs-need-protected-access 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-detection-is-a-hypothesis-encoded-as-logic 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/high-fidelity-and-high-coverage-pull-in-different-directions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/detections-inherit-telemetry-blind-spots 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/detection-names-should-describe-behaviour-not-certainty 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/suppression-is-a-security-decision 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/detection-rules-need-regression-tests 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/behaviour-often-outlives-static-indicators 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/weak-signals-can-correlate-into-a-strong-case 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/detection-ownership-includes-maintenance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/every-alert-should-have-an-investigative-next-step 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hunting-starts-with-a-question-not-a-dashboard 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/absence-of-evidence-depends-on-coverage 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hunts-can-become-future-detections 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-intelligence-should-change-a-question-or-action 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/entity-context-turns-events-into-investigations 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/baseline-means-understanding-normal-variation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hunt-scope-should-be-explicit 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-wrong-hypothesis-can-still-be-useful 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hunts-need-stopping-criteria 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/incident-severity-can-change-as-facts-emerge 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-timeline-should-separate-observation-from-inference 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/credential-reset-order-matters 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/recovery-needs-clean-dependencies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/incident-roles-reduce-decision-collisions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/reporting-clocks-can-start-before-certainty 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/post-incident-actions-should-fix-systems-not-just-people 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/forensic-copies-protect-original-evidence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hashes-can-show-evidence-stayed-unchanged 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/timestamps-need-interpretation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/memory-can-reveal-what-disk-cannot 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/forensic-tooling-can-change-the-thing-examined 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/deleted-does-not-always-mean-gone 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-forensics-depends-on-provider-evidence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/forensics-should-answer-specific-questions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/offline-copies-break-attacker-reachability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/immutable-backups-trade-flexibility-for-protection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rpo-and-rto-answer-different-questions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/restoring-data-can-restore-malware-too 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/backup-credentials-deserve-separate-protection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/recovery-order-follows-dependencies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/backup-retention-determines-how-far-back-you-can-restore-to-escape-corruption-or-compromise 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/recovery-tests-include-people-and-permissions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/snapshots-and-backups-solve-different-failure-modes 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/digital-signatures-provide-integrity-not-secrecy 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/key-rotation-cannot-undo-past-disclosure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/envelope-encryption-separates-data-keys-from-master-keys 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/crypto-agility-starts-with-inventory 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/encoding-is-not-encryption 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/classification-should-change-handling 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tokenisation-changes-what-systems-need-to-hold 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-lineage-explains-where-sensitive-data-travels 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-residency-is-not-automatic-security 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/retention-is-a-security-control 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-access-logs-need-object-context 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dlp-can-match-data-patterns-but-cannot-reliably-infer-the-business-purpose-of-a-transfer 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/anonymisation-is-about-re-identification-risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/differential-privacy-limits-one-person-s-influence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/consent-interfaces-can-undermine-genuine-choice 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/purpose-limitation-prevents-silent-mission-creep 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privacy-by-design-moves-decisions-earlier 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-privacy-notice-does-not-create-permission 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-subject-rights-depend-on-finding-the-data 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/aggregation-can-reduce-detail-while-preserving-insight 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privacy-risk-includes-inference-not-just-disclosure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/lawful-basis-is-the-reason-processing-is-permitted 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/consent-is-one-lawful-basis-not-the-default-answer 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/access-rights-concern-personal-data-not-every-document 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/erasure-is-not-an-absolute-delete-button 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-portability-is-narrower-than-a-database-export 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/rectification-requires-organisations-to-be-able-to-correct-inaccurate-personal-data-wherever-it-is-maintained 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/restriction-can-pause-use-without-erasing-data 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/objection-changes-the-decision-process 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/automated-decisions-can-require-safeguards 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/accountability-means-demonstrating-compliance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/an-llm-predicts-plausible-continuations-not-verified-truth 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/context-is-temporary-working-material-not-permanent-knowledge 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/retrieval-adds-documents-not-guaranteed-correctness 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/temperature-changes-variation-not-factuality 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/system-prompts-are-instructions-not-a-security-boundary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/llm-output-is-untrusted-input-downstream 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/fine-tuning-changes-behaviour-not-every-limitation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/benchmarks-measure-selected-tasks-not-universal-capability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/access-controls-protect-the-service-not-every-answer 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-risk-changes-when-output-becomes-action 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/prompt-secrecy-does-not-solve-prompt-injection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/output-encoding-still-matters-around-llms 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/retrieval-content-needs-trust-boundaries 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-model-can-leak-data-present-in-its-context 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/guardrails-are-layers-not-one-magic-classifier 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/telling-the-model-to-ignore-attacks-is-not-a-hard-boundary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/human-approval-needs-meaningful-information 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tool-descriptions-are-part-of-the-control-surface 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/agent-memory-can-preserve-poisoned-context 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/agent-identity-should-be-separate-from-user-identity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/delegated-agents-create-authority-chains 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/agent-loops-need-budgets-and-stopping-conditions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/high-impact-tools-need-stronger-confirmation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tool-results-are-untrusted-inputs-too 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/agent-observability-needs-action-level-traces 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/agent-rollback-is-not-always-possible 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-model-file-is-executable-trust-in-another-form 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dataset-provenance-matters-for-security-and-governance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/model-version-changes-can-be-security-changes 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/third-party-ai-apis-extend-the-data-boundary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/evaluation-data-can-leak-into-training 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/fine-tuning-credentials-are-production-credentials 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/open-models-shift-responsibility-toward-the-operator 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/model-registries-are-release-infrastructure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ai-inventories-need-models-prompts-tools-and-data 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-modelling-asks-how-a-design-can-fail-before-code-exists 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/input-validation-defines-what-the-application-accepts 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-requirements-are-product-requirements 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/code-review-and-automated-scanning-see-different-risks 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-tests-should-exercise-abuse-cases 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/feature-flags-can-become-security-states 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/error-handling-should-fail-predictably 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dependency-updates-are-part-of-development 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-debt-compounds-through-dependencies 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/assets-are-what-attackers-want-to-affect 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/attack-trees-decompose-goals-into-possible-paths 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/abuse-cases-describe-intentional-misuse 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-models-expire-as-systems-change 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mitigations-should-connect-to-specific-threats 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-models-include-failure-without-an-attacker 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/data-flow-diagrams-reveal-hidden-crossings 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/assumptions-are-part-of-the-threat-model 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/threat-modelling-is-a-decision-tool-not-a-ceremony 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-jump-host-concentrates-administrative-entry 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-bastion-should-not-become-a-general-purpose-workstation 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/bulkheads-contain-failure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/out-of-band-management-survives-primary-path-failure 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-choke-point-makes-control-observable 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-broker-can-separate-clients-from-powerful-credentials 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-one-way-gateway-changes-the-threat-model 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-quarantine-zone-creates-time-for-inspection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/control-planes-should-be-separated-from-what-they-control 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-service-mesh-moves-controls-into-the-communication-layer 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-security-exception-with-no-expiry-date-can-become-a-permanent-control-decision-nobody-deliberately-made 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/phishing-exploits-context-not-stupidity 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-warning-ignored-every-day-stops-being-a-warning 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-friction-moves-behaviour-elsewhere 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/mfa-fatigue-weaponises-repetition 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/verify-suspicious-requests-through-a-separate-channel 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/people-need-a-safe-way-to-report-mistakes-quickly 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-training-decays-without-practice 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/authority-signals-can-be-forged 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/qr-codes-hide-destinations-from-casual-inspection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/business-process-controls-can-beat-perfect-phishing-detection 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-is-about-uncertain-impact-not-merely-bad-things 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-risk-register-is-a-decision-queue-not-a-museum 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-acceptance-spends-organisational-tolerance 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/control-effectiveness-is-separate-from-control-existence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-owners-need-authority-over-the-consequence 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-aggregation-can-reveal-concentration 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/risk-appetite-needs-operational-thresholds 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/governance-should-distinguish-advice-from-approval 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-clauses-need-operational-follow-through 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/shared-responsibility-should-name-the-seam 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/supplier-notification-affects-your-response-clock 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/privileged-vendors-deserve-privileged-controls 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/exit-plans-are-security-controls 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/high-availability-and-disaster-recovery-solve-different-problems 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-dependency-can-be-more-critical-than-the-application 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/manual-workarounds-have-capacity-limits 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/recovery-priorities-should-follow-business-outcomes 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/resilience-includes-people-and-suppliers 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/failover-can-fail-if-never-exercised 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/graceful-degradation-preserves-the-important-part 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/recovery-from-corruption-differs-from-recovery-from-outage 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/crisis-communication-needs-alternate-channels 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/resilience-is-a-property-of-the-whole-service-chain 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-cyber-command-can-have-physical-consequences 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/legacy-does-not-mean-unnecessary 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/patching-ot-requires-process-context 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/segmentation-protects-process-zones 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/remote-maintenance-changes-the-plant-perimeter 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/process-anomalies-can-be-security-signals 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/asset-discovery-must-not-disrupt-fragile-systems 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-default-password-scales-into-a-fleet-vulnerability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/physical-access-changes-the-embedded-threat-model 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/firmware-updates-are-a-long-term-security-promise 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/secure-boot-protects-the-startup-chain 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/device-identity-should-be-unique 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/cloud-shutdown-can-strand-smart-devices 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/sensors-can-be-fooled-without-hacking-software 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/debug-interfaces-are-production-interfaces-if-accessible 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/iot-privacy-risk-grows-as-many-small-observations-accumulate-into-a-detailed-picture 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/end-of-support-is-a-security-event 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/domain-admin-is-a-forest-scale-key 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/kerberos-tickets-are-credentials 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/golden-ticket-attacks-target-the-ticket-authority 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/group-policy-is-a-fleet-control-plane 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/laps-reduces-shared-local-admin-secrets 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/ntlm-fallback-preserves-older-trust-assumptions 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/service-accounts-can-become-invisible-administrators 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/tiered-administration-separates-privilege-contexts 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/directory-replication-is-a-privileged-capability 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/active-directory-recovery-is-not-ordinary-server-restore 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/regulatory-scope-is-a-security-architecture-question 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/incident-reporting-deadlines-change-response-priorities 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/dora-makes-ict-third-party-resilience-a-contractual-and-oversight-responsibility-for-regulated-financial-entities 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/under-nis2-an-organisation-s-sector-size-and-role-can-determine-whether-cybersecurity-risk-management-and-reporting-duties-apply 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/breach-notification-and-incident-notification-are-different-tests 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/legal-privilege-does-not-make-incident-facts-disappear 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/regulation-can-make-suppliers-part-of-your-compliance-system 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/law-changes-faster-than-evergreen-security-principles 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/equifax-knowing-about-a-vulnerability-is-not-knowing-it-is-patched 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/target-supplier-access-showed-why-third-party-portals-need-strong-segmentation-from-sensitive-systems 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/colonial-pipeline-business-shutdown-can-follow-it-compromise 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/help-desk-identity-processes-are-attack-surfaces-when-social-engineering-can-trigger-password-resets-or-mfa-transfer 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/british-library-recovery-can-outlast-initial-disruption 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/hawaii-false-missile-alert-test-and-live-alert-paths-need-separation-because-confirmation-prompts-cannot-correct-a-convinced-operator 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/crowdstrike-2024-trusted-security-software-can-be-concentration-risk 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/lastpass-protecting-vaults-includes-developer-and-backup-paths 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/okta-support-compromise-support-artefacts-can-contain-session-power 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-competes-for-finite-organisational-attention 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-spend-should-follow-risk-concentration 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-creates-option-value-during-incidents 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/the-cheapest-control-can-be-removing-the-feature 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-debt-is-borrowed-future-effort 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/executive-decisions-need-ranges-not-false-precision 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/security-strategy-means-not-protecting-everything-equally 2026-10-08T06:38:58.086Z monthly 0.8 https://drawn2security.com/sketches/a-control-can-cost-more-than-the-risk-it-reduces 2026-10-08T06:38:58.086Z monthly 0.8