kri

furnace for kri

A Flask-based web application for regulatory compliance and risk monitoring in the telecommunications sector.

Kontrola bezpieczeństwa stanowiska Windows dla administratora IT: antywirus, zapora, aktualizacje, BitLocker, UAC, lokalni administratorzy, SMBv1, LSA, RDP, LAPS, system bez wsparcia. Raport HTML i zestawienie XLSX. Tylko odczyt.

Przegląd Active Directory dla administratora IT: nieaktywne konta i komputery, administratorzy domeny, ryzykowne ustawienia kont (AS-REP, Kerberoasting), systemy bez wsparcia, LAPS, polityka haseł. Tylko odczyt, raport w Excelu. Windows, Python.

Synthetic cybersecurity KPI/KRI dashboard model with executive, operations and risk dashboards covering coverage, patch latency, vulnerabilities, stale assets, EDR health, DLP events, incident SLA and audit remediation metrics.

Third-party and software supply chain risk assessment of the 2026 open-source compromise wave (Trivy, Bitwarden, Checkmarx → OpenAI/Vercel downstream). Full GRC workflow: methodology, risk register, NIST CSF 2.0 / ISO 27001 / SP 800-161 control mapping, TPRM program response, KRIs, and board briefing. OSFI B-10/B-13 context.