MINDMAP.md

May 30, 2026 ยท View on GitHub

Hack23 Logo

๐Ÿ—บ๏ธ Riksdagsmonitor โ€” System Mindmaps

๐Ÿง  Conceptual Maps for Democratic Intelligence Architecture
๐ŸŽฏ System Overview ยท Security ยท CI/CD ยท Data Integration ยท Compliance

Owner Version Effective Date Review Cycle

๐Ÿ“‹ Document Owner: CEO | ๐Ÿ“„ Version: 1.5 | ๐Ÿ“… Last Updated: 2026-05-06 (UTC)
๐Ÿ”„ Review Cycle: Quarterly | โฐ Next Review: 2026-08-03
๐Ÿข Owner: Hack23 AB (Org.nr 5595347807) | ๐Ÿท๏ธ Classification: Public


๐ŸŽฏ Purpose

This document provides conceptual mindmaps for Riksdagsmonitor, offering intuitive visual representations of the system's organization, workflows, and architecture. These mindmaps complement the detailed technical documentation and serve as entry points for understanding the platform's structure.

๐Ÿ“š Architecture Documentation Map

DocumentFocusDescription
๐Ÿ›๏ธ Architecture๐Ÿ—๏ธ C4 ModelsSystem context, containers, components
๐Ÿ“Š Data Model๐Ÿ“Š DataEntity relationships and data dictionary
๐Ÿ”„ Flowchart๐Ÿ”„ ProcessesBusiness and data flow diagrams
๐Ÿ“ˆ State Diagram๐Ÿ“ˆ StatesSystem state transitions and lifecycles
๐Ÿง  Mindmap๐Ÿง  ConceptsSystem conceptual relationships
๐Ÿ’ผ SWOT๐Ÿ’ผ StrategyStrategic analysis and positioning
๐Ÿ›ก๏ธ Security Architecture๐Ÿ”’ SecurityCurrent security controls and design
๐Ÿš€ Future Security๐Ÿ”ฎ SecurityPlanned security improvements
๐ŸŽฏ Threat Model๐ŸŽฏ ThreatsSTRIDE/MITRE ATT&CK analysis
๐Ÿ”ง Workflows๐Ÿ”ง DevOpsCI/CD automation and pipelines
๐Ÿ›ก๏ธ CRA Assessmentโš–๏ธ ComplianceEU Cyber Resilience Act conformity
๐Ÿš€ Future Architecture๐Ÿ”ฎ EvolutionArchitectural evolution roadmap
๐Ÿ“Š Future Data Model๐Ÿ”ฎ DataEnhanced data architecture plans
๐Ÿ”„ Future Flowchart๐Ÿ”ฎ ProcessesImproved process workflows
๐Ÿ“ˆ Future State Diagram๐Ÿ”ฎ StatesAdvanced state management
๐Ÿง  Future Mindmap๐Ÿ”ฎ ConceptsCapability expansion plans
๐Ÿ’ผ Future SWOT๐Ÿ”ฎ StrategyFuture strategic opportunities

1. ๐Ÿ—๏ธ System Overview Mindmap

mindmap
  root((๐Ÿ—ณ๏ธ Riksdagsmonitor))
    ๐ŸŽฏ Mission
      Swedish Parliament Intelligence
      Real-time Monitoring
      Historical Analysis
      Coalition Predictions
    ๐Ÿ“Š Data Products
      Intelligence Dashboard
      Party Performance
      Government Cabinet
      Top 10 Rankings
    ๐Ÿ” Security
      ISO 27001 Aligned
      STRIDE Threat Model
      Defense-in-Depth
      99.7% Risk Reduction
    ๐ŸŒ Technology
      Static HTML/CSS
      GitHub Pages
      CI/CD Automation
      Global CDN
    ๐Ÿ“‹ ISMS Compliance
      Security Architecture
      Threat Model
      Workflows Documentation
      Future Roadmap
    ๐Ÿ“ฆ Platform v0.9.40
      7,500+ Tests (237 files)
      23 Agents ยท 94 Skills
      14 Languages
      8 MCP Servers

2. ๐Ÿ” Security Architecture Mindmap

mindmap
  root((๐Ÿ›ก๏ธ Security<br/>Architecture))
    ๐ŸŒ Network Layer
      TLS 1.3 Encryption
      HTTPS-Only
      GitHub CDN
      DDoS Protection
    ๐Ÿ›ก๏ธ Application Layer
      Static Files Only
      No Server-Side Code
      No User Input Processing
      XSS/SQLi Immune
    ๐Ÿ”‘ Access Control
      GitHub MFA Required
      SSH Key Authentication
      GPG Commit Signing
      Branch Protection
    ๐Ÿ“‹ Data Integrity
      Git Immutable History
      Branch Protection Rules
      Code Review Required
      Audit Trail Complete
    ๐Ÿ” Monitoring
      Dependabot Alerts
      CodeQL Scanning
      Secret Scanning
      GitHub Security Dashboard
    ๐Ÿšจ Incident Response
      Documented Procedures
      Rollback Capability
      17-Minute RTO
      Audit Logs Available

3. ๐Ÿ”„ CI/CD Workflows Mindmap

mindmap
  root((๐Ÿ”„ CI/CD<br/>Workflows))
    โœ… Quality Checks
      HTML Validation
        HTMLHint
        Zero Errors
      Link Checking
        Linkinator v6
        Internal + External
      Summary Report
        Artifacts
        30-Day Retention
    ๐Ÿ”’ Dependency Review
      Vulnerability Scanning
        Critical/High Block
        Medium Warning
      License Compliance
        Apache 2.0 Required
        SBOM Generation
      PR Comments
        Always Visible
        Actionable
    ๐Ÿค– Copilot Setup
      MCP Server Init
        Filesystem
        GitHub API
        Git Operations
      Agent Environment
        Memory
        Sequential Thinking
        Playwright
      Permissions
        Least Privilege
        Scoped Tokens
    ๐Ÿš€ Deployment
      GitHub Pages
        Automatic
        CDN Distribution
      HTTPS Enforced
        TLS 1.3
        Valid Certificate
      Global Availability
        Low Latency
        High Uptime

4. ๐Ÿ“Š Data Integration Mindmap

mindmap
  root((๐Ÿ“Š Data<br/>Integration))
    ๐Ÿ›๏ธ CIA Platform
      Intelligence Dashboard
      Party Performance
      Government Cabinet
      Politician Analysis
    ๐Ÿ‡ธ๐Ÿ‡ช Swedish Parliament
      Votes Database
      Documents Archive
      Committee Work
      MP Information
    ๐Ÿ—ณ๏ธ Election Authority
      Results Data
      Voter Turnout
      Electoral Statistics
      Historical Trends
    ๐Ÿ’ฐ Financial Authority
      Budget Data
      Spending Analysis
      Ministry Finances
      Cost Tracking
    ๐ŸŒ World Bank
      Country Indicators
      Economic Data
      Development Metrics
      Comparative Analysis
    ๐ŸŒ IMF
      WEO (NGDP_RPCH, PCPIPCH, LUR, GGXWDG_NGDP, BCA_NGDPD)
      Fiscal Monitor
      IFS (monthly monetary/FX/BOP)
      GFS_COFOG (committee-aligned spending)
      SDMX 3.0 + Datamapper JSON
      T+5 Projections (2031 horizon)
      Pure-TS client (scripts/imf-client.ts, no MCP)

5. ๐Ÿ›ก๏ธ ISMS Compliance Mindmap

mindmap
  root((๐Ÿ›ก๏ธ ISMS<br/>Compliance))
    ๐Ÿ“‹ ISO 27001:2022
      7 Controls Implemented
        Access Control
        Cryptography
        Network Security
        Monitoring
        Incident Response
        Secure Development
        Logging
      Control Mapping
        Security Architecture
        Threat Model
        Evidence Documentation
    ๐ŸŽฏ NIST CSF 2.0
      6 Functions Aligned
        Identify Assets
        Protect Systems
        Detect Threats
        Respond to Incidents
        Recover Operations
        Govern Security
      Implementation Evidence
        Workflows
        Architecture Docs
        Security Controls
    ๐Ÿ† CIS Controls v8.1
      6 Controls Active
        IG1: 3 Controls
          Encryption
          Account Inventory
          Audit Logs
        IG2: 3 Controls
          RBAC
          Security Alerting
          Secure Development
      Compliance Checklist
        Regular Reviews
        Evidence Collection

6. ๐Ÿš€ Future Evolution Mindmap

mindmap
  root((๐Ÿš€ Future<br/>Evolution))
    ๐Ÿ” Post-Quantum Crypto
      2027 Assessment
      2027 Hybrid Mode
      2028 Full PQC
      NIST Standards
    ๐Ÿค– AI-Augmented Security
      Anomaly Detection
      Threat Intelligence
      Behavioral Analysis
      Predictive Security
    ๐Ÿ›ก๏ธ Zero-Trust Architecture
      Contributor Access
      Infrastructure Verify
      Network Isolation
      Micro-Segmentation
    ๐Ÿ“Š Advanced Monitoring
      APM Integration
      SIEM Deployment
      Distributed Tracing
      Real-Time Analytics
    ๐ŸŒ Platform Evolution
      CloudFlare Pages
      Multi-CDN Strategy
      AWS Migration Option
      Enhanced WAF

7. ๐Ÿ‘ฅ Stakeholder Interaction Mindmap

mindmap
  root((๐Ÿ‘ฅ Stakeholders))
    ๐ŸŒ End Users
      Global Audience
      Multi-Language Support
      Mobile + Desktop
      Accessibility Focus
    ๐Ÿ›๏ธ Swedish Citizens
      Election Monitoring
      MP Performance
      Coalition Tracking
      Historical Data Access
    ๐Ÿ“ฐ Media & Journalists
      Data Journalism
      Fact-Checking
      Investigation Support
      Open Data Access
    ๐ŸŽ“ Researchers
      Academic Research
      Political Science
      Data Analysis
      Historical Studies
    ๐Ÿ‘จโ€๐Ÿ’ป Developers
      Open Source
      API Integration
      Documentation
      Contributing
    ๐Ÿ”’ Security Team
      Hack23 AB
      ISMS Oversight
      Incident Response
      Compliance Audits

8. ๐Ÿ“ˆ Metrics & KPIs Mindmap

mindmap
  root((๐Ÿ“ˆ Metrics<br/>& KPIs))
    ๐Ÿ”’ Security Metrics
      Residual Risk: 5.52/10.0
      Risk Reduction: 99.7%
      Vulnerabilities: 0 Critical
      MTTR: <17 Minutes
    โœ… Quality Metrics
      HTML Validation: โœ… Pass
      Link Check: โœ… Pass
      Code Coverage: N/A Static
      Accessibility: WCAG 2.1 AA
    ๐Ÿ“Š Performance Metrics
      FCP: <1 Second
      TTI: <2 Seconds
      CLS: <0.05
      CDN Uptime: 99.9%
    ๐Ÿ”„ CI/CD Metrics
      Workflow Success: >95%
      Deployment Frequency: Daily
      Lead Time: <2 Minutes
      Rollback Time: <17 Minutes
    ๐Ÿ“‹ Compliance Metrics
      ISO 27001: 7 Controls
      NIST CSF 2.0: 6 Functions
      CIS Controls: 6 Active
      Audit Readiness: โœ…

9. ๐Ÿ” Threat Landscape Mindmap

mindmap
  root((๐Ÿ” Threat<br/>Landscape))
    โš ๏ธ Current Threats
      Low Risk: 8 Threats
      Medium Risk: 3 Threats
      High Risk: 0 Threats
      Overall: LOW
    ๐ŸŽฏ STRIDE Analysis
      Spoofing: 2 Threats
      Tampering: 2 Threats
      Repudiation: 1 Threat
      Info Disclosure: 2 Threats
      DoS: 2 Threats
      Elevation: 2 Threats
    ๐Ÿ›ก๏ธ Mitigations
      Preventive: 7 Controls
      Detective: 4 Controls
      Corrective: 3 Controls
      Total: 14 Controls
    ๐Ÿš€ Future Threats
      Quantum Computing
      AI-Powered Attacks
      Supply Chain Attacks
      Nation-State APTs

10. ๐ŸŒ Multi-Language Support Mindmap

mindmap
  root((๐ŸŒ Multi-Language<br/>Support))
    ๐Ÿ‡ช๐Ÿ‡บ European Languages
      ๐Ÿ‡ฌ๐Ÿ‡ง English Primary
      ๐Ÿ‡ธ๐Ÿ‡ช Swedish
      ๐Ÿ‡ฉ๐Ÿ‡ฐ Danish
      ๐Ÿ‡ณ๐Ÿ‡ด Norwegian
      ๏ฟฝ๏ฟฝ๐Ÿ‡ฎ Finnish
      ๐Ÿ‡ฉ๐Ÿ‡ช German
      ๐Ÿ‡ซ๐Ÿ‡ท French
      ๐Ÿ‡ช๐Ÿ‡ธ Spanish
      ๐Ÿ‡ณ๐Ÿ‡ฑ Dutch
    ๐ŸŒ Middle East & Asia
      ๐Ÿ‡ธ๐Ÿ‡ฆ Arabic
      ๐Ÿ‡ฎ๐Ÿ‡ฑ Hebrew
      ๐Ÿ‡ฏ๐Ÿ‡ต Japanese
      ๐Ÿ‡ฐ๐Ÿ‡ท Korean
      ๐Ÿ‡จ๐Ÿ‡ณ Chinese
    ๐Ÿ”ง Technical Implementation
      Hreflang Tags
      SEO Optimization
      Sitemap.xml Entries
      Language Switching
      Content Localization

11. ๐Ÿ”ฌ Political Intelligence Methods Mindmap

mindmap
  root((๐Ÿ”ฌ Political Intelligence<br/>Methods ยท 18))
    ๐Ÿ“Š Core Analysis
      AI-Driven Analysis Guide
      Synthesis Methodology
      Per-Artifact Methodologies
      Per-Document Methodology
    ๐ŸŽฏ Political Domain
      Political Classification Guide
      Political Risk Methodology
      Political SWOT Framework
      Political Threat Framework
      Political Style Guide
    ๐ŸŒ Data Sources
      IMF Indicator Mapping
      World Bank Indicator Mapping
      OSINT Tradecraft Standards
    ๐Ÿ“ Structural
      Structural Metadata Methodology
      Artifact Catalog
      Strategic Extensions
      Electoral Domain Methodology
    ๐Ÿ” Quality
      Analytical Supplementary
      Reference Quality Thresholds

12. ๐Ÿ“‹ Analysis Templates Mindmap

mindmap
  root((๐Ÿ“‹ Analysis<br/>Templates ยท 39))
    ๐ŸŽฏ Core Analysis
      Intelligence Assessment
      Executive Brief
      Synthesis Summary
      Analysis Index
      Significance Scoring
    โš ๏ธ Risk & Threat
      Risk Assessment
      Threat Analysis
      Political STRIDE Assessment
      Devils Advocate
      Wildcards Black Swans
    ๐Ÿ“ˆ Strategic
      SWOT Analysis
      Quantitative SWOT
      PESTLE Analysis
      Scenario Analysis
      Implementation Feasibility
    ๐Ÿ—ณ๏ธ Electoral
      Election 2026 Analysis
      Election Cycle Analysis
      Coalition Mathematics
      Voter Segmentation
    ๐Ÿ”ญ Forward-Looking
      Forward Indicators
      Horizon PIR Roll-Forward
      Cycle Trajectory
      Month-Ahead / Week-Ahead
    ๐ŸŒ Comparative
      Comparative International
      Historical Parallels
      Media Framing Analysis
    ๐Ÿ‘ฅ Stakeholder
      Stakeholder Impact
      Political Classification
      Per-File Political Intel
    ๐Ÿ›๏ธ Parliamentary
      Parliamentary Season
      Session Baseline
      Cross-Session Intelligence
    โœ… Quality
      Methodology Reflection
      Reference Analysis Quality
      MCP Reliability Audit
      Workflow Audit
    ๐Ÿ”ง Infrastructure
      Cross-Reference Map
      Cross-Run Diff
      Data Download Manifest

13. ๐Ÿ”ญ Horizon Stratification Mindmap

mindmap
  root((๐Ÿ”ญ Horizon<br/>Stratification))
    โฑ๏ธ Short-Term
      T+72h Breaking News
      T+7d Week-Ahead Forecast
    ๐Ÿ“… Medium-Term
      T+30d Month-Ahead Analysis
      T+90d Quarter Outlook
    ๐Ÿ“† Long-Term
      T+365d Annual Projection
      T+1460d Election Cycle
      Election Anchor Date
    ๐Ÿ—๏ธ Structure
      23-Artifact Families A-D
      Family A Core Synthesis (9)
      Family B Structural Metadata (2)
      Family C Strategic Extensions (5)
      Family D Electoral Lenses (7)
    ๐Ÿšฆ Analysis Gate
      Checks 1-9b Automated
      AI-FIRST 2-Iteration Model
      Pass 1 Create
      Pass 2 Review and Improve
    ๐Ÿ“Š Scenario Depth
      Quarter: 4 Scenarios
      Year: 4+5 Wildcards
      Election: 12 Leaves + 5 Wildcards

๐Ÿ“ Using These Mindmaps

For New Team Members

  1. Start with System Overview to understand the platform
  2. Review Security Architecture to grasp defense-in-depth
  3. Study CI/CD Workflows to understand automation
  4. Explore Data Integration to see external dependencies

For Security Auditors

  1. Begin with ISMS Compliance mindmap
  2. Examine Security Architecture layers
  3. Review Threat Landscape analysis
  4. Check Metrics & KPIs for evidence

For Stakeholders

  1. Use Stakeholder Interaction to identify your role
  2. Review System Overview for capabilities
  3. Check Metrics & KPIs for performance
  4. Explore Future Evolution for roadmap

For Developers

  1. Study CI/CD Workflows for contribution process
  2. Review Security Architecture for constraints
  3. Check Data Integration for external APIs
  4. Explore Technical Implementation details

๐Ÿ“š Architecture Documentation Map

DocumentFocusDescription
๐Ÿ›๏ธ Architecture๐Ÿ—๏ธ C4 ModelsSystem context, containers, components
๐Ÿ“Š Data Model๐Ÿ“Š DataEntity relationships and data dictionary
๐Ÿ”„ Flowchart๐Ÿ”„ ProcessesBusiness and data flow diagrams
๐Ÿ“ˆ State Diagram๐Ÿ“ˆ StatesSystem state transitions and lifecycles
๐Ÿง  Mindmap๐Ÿง  ConceptsSystem conceptual relationships
๐Ÿ’ผ SWOT๐Ÿ’ผ StrategyStrategic analysis and positioning
๐Ÿ›ก๏ธ Security Architecture๐Ÿ”’ SecurityCurrent security controls and design
๐Ÿš€ Future Security๐Ÿ”ฎ SecurityPlanned security improvements
๐ŸŽฏ Threat Model๐ŸŽฏ ThreatsSTRIDE/MITRE ATT&CK analysis
๐Ÿ”ง Workflows๐Ÿ”ง DevOpsCI/CD automation and pipelines
๐Ÿ›ก๏ธ CRA Assessmentโš–๏ธ ComplianceEU Cyber Resilience Act conformity
๐Ÿš€ Future Architecture๐Ÿ”ฎ EvolutionArchitectural evolution roadmap
๐Ÿ“Š Future Data Model๐Ÿ”ฎ DataEnhanced data architecture plans
๐Ÿ”„ Future Flowchart๐Ÿ”ฎ ProcessesImproved process workflows
๐Ÿ“ˆ Future State Diagram๐Ÿ”ฎ StatesAdvanced state management
๐Ÿง  Future Mindmap๐Ÿ”ฎ ConceptsCapability expansion plans
๐Ÿ’ผ Future SWOT๐Ÿ”ฎ StrategyFuture strategic opportunities

Hack23 ISMS Policies


๐Ÿ“‹ Document Control:
โœ… Approved by: James Pether Sรถrling, CEO
๐Ÿ“ค Distribution: Public
๐Ÿท๏ธ Classification: Confidentiality: Public
๐Ÿ“… Effective Date: 2026-02-20
โฐ Next Review: 2026-05-20
๐ŸŽฏ Framework Compliance: ISO 27001 NIST CSF 2.0 CIS Controls


๐ŸŒ IMF Economic-Data Branch (Current State)

Status: โœ… Implemented and in production. IMF is the primary economic-data source today; the mindmap below shows the IMF subtree as currently realised. World Bank is the residue-only branch (governance / environment / social). Hub: analysis/imf/.

mindmap
  root((Economic Data Sources โ€” Current))
    IMF [PRIMARY ยท IMPLEMENTED 2026-04]
      Client
        scripts/imf-client.ts pure TypeScript
        scripts/imf-context.ts high-level
        scripts/imf-fetch.ts CLI
        scripts/imf-codes.ts registry
      Dataflows in production
        WEO NGDP_RPCH PCPIPCH LUR GGXWDG_NGDP BCA_NGDPD
        Fiscal Monitor cyclically-adjusted balance primary balance EDP debt
        IFS monthly CPI policy rates reserves
        BOP current account quarterly
        DOTS bilateral trade monthly
        GFS_COFOG 02 Defence 07 Health 09 Education 10 Social protection
        PCPS commodity benchmarks
        ER SEK FX daily
        MFS_IR MFS_PR monetary survey
      Cache and provenance
        Vintage-tagged in analysis/daily economic-data.json
        SHA-256 payload pin
        economicProvenance block in every article
      Tests
        tests/imf-client.test.ts
        tests/imf-codes.test.ts
        tests/imf-context.test.ts
        tests/imf-inventory.test.ts 13 assertions
        tests/economic-context-multi-provider.test.ts
    World Bank [RESIDUE ONLY governance environment social]
      worldbank-mcp MCP server
      WGI governance CC.EST RL.EST VA.EST GE.EST RQ.EST PV.EST
      Environment CO2 renewables forest water
      Social residue literacy participation gender ratios
      Defence depth MS.MIL historicals
    SCB [SWEDISH GROUND TRUTH]
      scb-mcp MCP server PxWeb v2
      AKU monthly labour
      KPI monthly inflation
      Regional municipal
      Budget execution

๐Ÿ›๏ธ Statskontoret Integration Branch (Current State)

mindmap
  root((Statskontoret Integration))
    Purpose
      Swedish agency structure
      Government-body headcount
      Central-government budget execution
    Sources
      Myndighetsforteckning
        Annual
        XLSX
        Headcount by department
      Arsutfall
        Annual
        XLSX
        CSV ZIP
      Manadsutfall
        Monthly
        XLSX
        CSV ZIP
      Budget time series
        Long-run state budget context
    Code
      statskontoret-client.ts
        Discovery
        XLSX parser
        CSV ZIP parser
        Typed StatskontoretError
      statskontoret-fetch.ts
        list-sources
        discover
        headcount
    Governance
      Public classification
      No MCP server
      No credentials
      www.statskontoret.se allowlist
      analysis/statskontoret inventory
    Tests
      client tests
      CLI parsing tests
      inventory tests

๐Ÿ”— Hack23 Ecosystem

๐ŸŒ Platforms ๐Ÿ“ฆ Open-Source Projects ๐Ÿ›ก๏ธ Governance & Standards
๐Ÿ—ณ๏ธ Riksdagsmonitor โ€” Swedish Parliament intelligence
๐Ÿ‡ช๐Ÿ‡บ EU Parliament Monitor โ€” European coverage
๐Ÿ•ต๏ธ Citizen Intelligence Agency โ€” political-data engine
๐ŸŒ Hack23 AB โ€” corporate site
๐Ÿ“ฐ Hack23 Blog โ€” engineering & policy
๐Ÿ’ผ Hack23 on LinkedIn
๐Ÿ—ณ๏ธ Hack23/riksdagsmonitor
๐Ÿ•ต๏ธ Hack23/cia
๐Ÿ‡ช๐Ÿ‡บ Hack23/euparliamentmonitor
๐Ÿ”Œ Hack23/european-parliament-mcp
โœ… Hack23/cia-compliance-manager
๐Ÿฅ‹ Hack23/black-trigram
๐Ÿ  Hack23/homepage
๐Ÿ›ก๏ธ Hack23 ISMS-PUBLIC โ€” public ISMS
๐Ÿ”’ Information Security Policy
๐Ÿค– AI Policy
๐Ÿงช Secure Development Policy
๐ŸŽฏ Threat Modeling Policy
โš ๏ธ Vulnerability Management
๐Ÿท๏ธ Classification Framework

OpenSSF Best Practices OpenSSF Scorecard ISO 27001:2022 NIST CSF 2.0 CIS Controls v8.1 Apache 2.0

๐Ÿ—ณ๏ธ Empower citizens ยท ๐Ÿ” Strengthen democratic accountability ยท ๐Ÿ•ต๏ธ Illuminate the political process

ยฉ 2008โ€“2026 Hack23 AB (Org.nr 559534-7807) ยท Maintainer: James Pether Sรถrling, CISSP CISM