Find me on LinkedIn
Identity & Security Thinking-Hub



This hub is not about controls, frameworks, or compliance checklists.

It is about why security fails despite all of them.

Each model isolates a different failure layer, decisions, governance, attacker behavior, and control interpretation, so failures can be understood, not just documented.



This material is open for educational and research use.
Commercial use without explicit permission from the author is not allowed



How to read these models

Each Model examines a different dimension of identity and security failure.
They are designed to be used independently, but become most powerful when viewed together.
Rather than providing answers, the models help you ask better questions, about decisions, governance breakdowns, attacker behavior, and control interpretation.

The goal is not sequential reading, but layered understanding.

Explore the Models
Identity Threat Intelligence Framework (ITIF)


Documents how attackers exploit identity systems in real-world environments.
Maps attacker behavior, techniques, and escalation paths across the identity attack lifecycle, from reconnaissance to persistence and impact.

Security Governance Failure Atlas (SGFA)


Analyzes why security governance breaks down before technical controls fail.
Captures organizational, cultural, and structural failure patterns that make security incidents predictable.


Enterprise Control & Regulation Lens (ECIL)


Interprets security controls across regulatory frameworks.
Shows how similar requirements are understood, implemented, and evidenced differently across standards such as ISO 27001, NIS2, DORA, GDPR, and SOC 2.

Security Decision Registry
(SDR)


Catalogs the specific architectural, policy, and operational decisions that introduce security risk.
Traces the decision-to-incident chain to explain how individual choices lead to systemic failure.

Created by Claudiu Tabac - © 2026

This material is open for educational and research use. Commercial use without explicit permission from the author is not allowed