I am an independent-ish security tooling & compliance engineer.
Recently I'm working on AWS-aligned and/or APAC-focused security & compliance automation.
Here's a few of my projects.
- 🇦🇺 Australia
- ISMexplorer: AU Information Security Manual (ISM) interactive explorer tool https://ismexplorer.org
- DitchDistance: AU vs NZ Information Security Manual(s) interactive explorer tool https://ditchdistance.org
- Australian Energy Sector Cyber Security Framework (AESCSF) control set in OSCAL https://github.com/badenh/aescsf-oscal
- 🇳🇿 New Zealand
- DitchDistance: NZ vs AU Information Security Manual(s) interactive explorer tool https://ditchdistance.org
- NZ Information Security Manual (NZISM) control set in OSCAL https://github.com/badenh/nzism-oscal
- 🇸🇬 Singapore
- ICT&SS Policy Reform (IM8 successor) control set in OSCAL https://github.com/badenh/sg-ictss-oscal
- Association of Banks in Singapore's Control Objectives and Procedures for Outsourced Service Providers (OSPAR) control set in OSCAL https://github.com/badenh/sg-ospar2.0-oscal
- 🇲🇾 Malaysia
- National Cyber Security Baseline (NCSB) control set in OSCAL https://github.com/badenh/my-ncsb-oscal
- 🇹🇭 Thailand
- NCSC Cybersecurity Standards for Cloud Systems (BE 2567/2024) control set in OSCAL https://github.com/badenh/th-ncsa-be2567-oscal
- 🇭🇰 Hong Kong
- S17 Baseline IT Security Policy control set in OSCAL https://github.com/badenh/hk-s17-baseline-itsecpol-oscal
- Landing Zone Accelerator (LZA)
- LZAtracer: LZA UC vs other LZA variant comparison tool https://lzatracer.net
- 🤖 CLI version https://github.com/badenh/lzatracer-cli or https://www.npmjs.com/package/@lzatracer/cli (works offline/private repo)
cfn2lza: Converter for CloudFormation-based Landing Zones to Landing Zone Accelerator Universal Configuration stacks https://github.com/badenh/cfn2lza- 🇹🇭 Thailand Secure Landing Zone in LZA UC https://github.com/badenh/thailand-cfn-slz-xnv-lza
- 🇲🇾 Malaysia Secure Landing Zone in LZA UC https://github.com/badenh/malaysia-cfn-slz-xnv-lza
lzareplgen: replacements file generator for LZA UC https://github.com/badenh/lzaucreplgen
- LZAtracer: LZA UC vs other LZA variant comparison tool https://lzatracer.net
- AWS Region-Service Availability
- ARSM: AWS Region-Service Matrix https://arsm.info - there's a few of these around but this was built using a specific combination of different AWS sources and to get a feed of reliable information to bootstrap other tools
- AIUC-1
- AIUC1explorer: AIUC-1 interactive explorer tool https://aiuc1explorer.org
- AIUC-1 in OSCAL https://github.com/badenh/aiuc1-oscal/