Weekly report week 9 (2025)

24.02 - 28.02

Hi there,

This week I spent some time digging into ISO-27001 again. It was really helpful to break it down to multiple sessions for having manageable parts. All in all it’s a quite big framework, but because I extend it more and more it also gets easier to understand all the connections. I’m definitely feeling more confident about what’s needed to move toward compliance. And I also held a short briefing for our security group to prepare them for the audit next week.

On top of that I’m working through the very last module of the Private Cloud modules. It’s that satisfying-but-also-slightly-tiring phase where you just want to cross the finish line. Almost there — just tying up loose ends and making sure everything’s solid before calling it done even tho I already have a support case which I need to open.

Also my certicopter code got reviewed by a colleague this week, and the feedback was super valuable. He spotted a couple things of which I didn’t think of — some cleanup needed, and a couple of tweaks to improve clarity/security to make it publicly available. Always good to have fresh eyes on things.

And last but not least we (PiBS) had the luxury to join workshop on Active Directory (part 2), and I honestly super interesting. Covered a lot around hands on as well as some real-world use cases that sparked a few ideas for us.

All in all, a solid week — a mix of learning, wrapping things up, and getting good input from others. Have a nice weekend.