Abdullah Bin ZarshaidSelected work
Public tools, original research and practical demonstrations. Each piece makes its purpose, method and boundaries clear.
Original product · built by Abdullah · private pilot · PRODUCT & GRC ENGINEERING
Abdullah’s original GRC product: a purpose-built workspace for scoped pre-assessments, gap reviews, controls, risks, private evidence, remediation tracking, human review and report/export workflows.
17 framework and reference catalogues with 1,925 entries; coverage, source and reuse rights differ by catalogue.
Six original spreadsheet starters for risk, evidence, remediation, supplier review, policy ownership and assessment scope.
Release status: Private pilot; organization administration, standalone authentication, complete backup/restore and several enterprise capabilities remain in development.
Boundary: Not a Vanta or Drata replacement, certification service, audit opinion or guarantee of compliance. Private customer evidence is not shown in this portfolio.
Request a private walkthrough ↗Private application and repository. No customer evidence is displayed here.
A missing observation is not a pass.
Windows, identity and network posture built around an inspectable evidence trail.
Checks support judgment. They do not replace it.
Repeatable checks for assessment evidence, scope and technical reporting consistency.
Three fictional findings reviewed for impact, severity and remediation precision.
SYNTHETIC / ASSURANCEConnect assurance claims to records and explicit next actions.
RESEARCH / SESSION LIFECYCLEInvestigating authority changes and reproducible security testing.
PUBLIC ARTIFACTS & RESEARCH
A wider view of original tools, learning resources and research contributions, each linked to its source and described within its real boundary.
Open learning resource
A 138-page, 19-part handbook connecting authorized network assessment methods to reporting and defensive decisions.
Boundary: A learning resource, not authorization to test systems or a replacement for environment-specific procedures.
Authorized cybersecurity lab resource
Nineteen topic guides for authorized university cybersecurity labs with defensive and detection context.
Boundary: Exercises belong only in explicitly authorized lab environments; credited student contributions remain attributed in source.
Original practical resources
Six spreadsheet trackers for risk, evidence, remediation, supplier review, policy ownership and assessment scope.
Boundary: Working aids, not complete framework checklists, audit opinions or certification evidence.
Public research contribution
A proposal concerning improper enforcement of explicit session termination, submitted through the public CWE content-development process.
Boundary: Receipt acknowledged and evaluation pending; not an accepted CWE entry.
SECURITY PRACTICE MAP
Technical assessment, protective operations, assurance and people development meet in the work. Expand each practice area for the capability map.