Hi, I'm Parker Brissette. I'm a cybersecurity leader based in Colorado, and everything on this site is my own independent work: researched, written, coded, tested, and fact-checked by me, on my own time. I built it because the security industry has a language problem. The acronyms multiply faster than anyone can learn them, and the people who most need this knowledge are often the ones the jargon locks out. Translating hard security ideas into plain English is the skill I have practiced my whole career, and this site is that skill turned into a public utility.
What I bring to security
Leadership & strategy
Building security programs end to end: vision, roadmap, budget, team, and the board conversation. I translate cyber risk into business language, align spend with actual risk appetite, and lead organizations through the moments when it counts, including full ransomware recovery with zero business impact.
Governance, risk & compliance
Deep, hands-on fluency across NIST CSF, ISO/IEC 27001, SOC 2, PCI DSS, HIPAA, CIS Controls, GDPR, and SOX ITGC, from writing the first policy to sitting across from the auditor. The framework translations on this site come from years of making these standards make sense to real teams.
Security operations
Incident command, SOC leadership, detection engineering, threat modeling, and vulnerability management. I have built 24/7 operations from scratch, tuned detections to cut noise instead of adding to it, and I still write the queries myself.
Cloud & identity
Security architecture across AWS, Azure, and GCP, zero trust design, and identity and access management, from privileged access controls to OAuth flows. Cloud-first, least-privilege, and pragmatic about what lean teams can actually operate.
AI security & governance
Securing AI systems and governing their adoption: NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS, and ISO/IEC 42001, plus practical guardrails for model integrity, privacy, and prompt security. I also build agentic automation inside security operations, so the AI opinions here are earned, not borrowed.
Building & teaching
Everything in this ecosystem is hand-built, from this static, privacy-first TypeScript site to full-stack Next.js apps with real databases and auth, all automatically tested. Teaching is the through line of my career, and every quiz deck, metaphor, game, and assessment here exists to make someone better at this job.
The full menu
This glossary is the hub, but the kitchen doesn't stop there. Three companion apps, each built from the ground up:
MITRE ATT&CK Adventure →
A gamified security range built entirely from MITRE's official ATT&CK, D3FEND, and CWE/CAPEC data. Play the attacker across all 14 kill-chain phases, defend with 132 real countermeasures mapped to 418 techniques, or spot and fix real code weaknesses in secure-dev mode. Replay historical breaches, chase the daily challenge, and study catalogs that light up as you learn.
Business Impact Assessment →
A standards-based BIA platform grounded in ISO 22317, ISO 22301, NIST SP 800-34, and the BCI Good Practice Guidelines. Time-phased impact analysis derives MTPD, criticality tiers, and RTO/RPO gaps (never self-declared), then generates tabletop exercises from your own data and a complete, printable business continuity plan.
Cyberdle →
The daily acronym game: guess it in six tries, and win or lose, walk away knowing what it stands for, why it matters, and where to read more. Practice and study modes drill the ones you miss, streaks keep you honest, and it installs as an offline-friendly app.
Credentials
Why it's free
Because the barrier to entry in security should be curiosity, not cost. There are no accounts here, no tracking, and nothing you type ever leaves your browser. The source is public on GitHub. If this site helps you pass a cert, brief your board, or finally understand what your vendor is selling you, it did its job.