Pavel Yermalovich, Author at SmartSec Information Security Governance Lab

About Pavel Yermalovich

This author has not yet filled in any details.
So far Pavel Yermalovich has created 11 blog entries.

Toward Intelligent and Adaptive Security Policies: The Future of AI-Driven Governance
Gallery
Toward Intelligent and Adaptive Security Policies: The Future of AI-Driven Governance

Compliance, Regulatory, and Legal Requirements, Implementation of Security Controls, Security Policy Development and Enforcement

Toward Intelligent and Adaptive Security Policies: The Future of AI-Driven Governance

Abstract While artificial intelligence (AI) is increasingly used to enhance [...]

By Pavel Yermalovich|2025-06-27T21:24:32-04:002025-06-27|Compliance, Regulatory, and Legal Requirements, Implementation of Security Controls, Security Policy Development and Enforcement|0 Comments

Preparing for Ultra-Short Certificate Lifespans: Budgeting and Automation Strategies for 2026–2029
Gallery
Preparing for Ultra-Short Certificate Lifespans: Budgeting and Automation Strategies for 2026–2029

Development of Security Strategy

Preparing for Ultra-Short Certificate Lifespans: Budgeting and Automation Strategies for 2026–2029

1. The Shrinking Lifespan of TLS Certificates In an effort [...]

By Pavel Yermalovich|2025-06-27T21:05:17-04:002025-06-27|Development of Security Strategy|0 Comments

Legacy Encryption and the Emerging Threat of Data Archive Exposure in the Post-Quantum Era
Gallery
Legacy Encryption and the Emerging Threat of Data Archive Exposure in the Post-Quantum Era

Development of Security Strategy

Legacy Encryption and the Emerging Threat of Data Archive Exposure in the Post-Quantum Era

Introduction Data encryption has long been a cornerstone of information [...]

By Pavel Yermalovich|2025-04-23T23:42:43-04:002025-04-23|Development of Security Strategy|0 Comments

The Rapid Obsolescence of TLS 1.2 Cipher Suites and the Need for AI-Driven Configuration Automation
Gallery
The Rapid Obsolescence of TLS 1.2 Cipher Suites and the Need for AI-Driven Configuration Automation

Continuous Improvement and Innovation, Security Policy Development and Enforcement

The Rapid Obsolescence of TLS 1.2 Cipher Suites and the Need for AI-Driven Configuration Automation

AbstractEncryption algorithms become obsolete at a rapid pace, especially in [...]

By Pavel Yermalovich|2025-04-18T00:11:35-04:002025-04-18|Continuous Improvement and Innovation, Security Policy Development and Enforcement|0 Comments

TLS Certificate Lifespans Reduced to 47 Days by 2029: The Need for Automation in the Post-Quantum Era
Gallery
TLS Certificate Lifespans Reduced to 47 Days by 2029: The Need for Automation in the Post-Quantum Era

Compliance, Regulatory, and Legal Requirements, Implementation of Security Controls

TLS Certificate Lifespans Reduced to 47 Days by 2029: The Need for Automation in the Post-Quantum Era

Abstract By 2029, the maximum lifespan of publicly trusted TLS [...]

By Pavel Yermalovich|2025-04-16T19:58:28-04:002025-04-16|Compliance, Regulatory, and Legal Requirements, Implementation of Security Controls|0 Comments

Cryptographic Erasure: A Pragmatic Solution for Cloud Sanitization
Gallery
Cryptographic Erasure: A Pragmatic Solution for Cloud Sanitization

Implementation of Security Controls

Cryptographic Erasure: A Pragmatic Solution for Cloud Sanitization

Abstract As organizations shift towards cloud-native infrastructure, the challenge of [...]

By Pavel Yermalovich|2025-04-08T21:19:12-04:002025-04-13|Implementation of Security Controls|0 Comments

Architectural Complexity of Cloud Storage and Data Redundancy: A Double-Edged Sword
Gallery
Architectural Complexity of Cloud Storage and Data Redundancy: A Double-Edged Sword

IT Security

Architectural Complexity of Cloud Storage and Data Redundancy: A Double-Edged Sword

Abstract Cloud storage has transformed the way organizations manage, store, [...]

By Pavel Yermalovich|2025-04-08T21:07:08-04:002025-04-12|IT Security|0 Comments

Erosion of Public Trust in Major Cloud Service Providers: The Hidden Persistence of “Deleted” Data
Gallery
Erosion of Public Trust in Major Cloud Service Providers: The Hidden Persistence of “Deleted” Data

IT Security

Erosion of Public Trust in Major Cloud Service Providers: The Hidden Persistence of “Deleted” Data

Abstract While cloud storage services have become the cornerstone of [...]

By Pavel Yermalovich|2025-04-08T21:07:14-04:002025-04-11|IT Security|0 Comments

The Imperative of Data Sanitization in Virtualized Storage
Gallery
The Imperative of Data Sanitization in Virtualized Storage

Compliance, Regulatory, and Legal Requirements, Implementation of Security Controls

The Imperative of Data Sanitization in Virtualized Storage

Abstract As organizations increasingly adopt virtualized infrastructure and cloud computing, [...]

By Pavel Yermalovich|2025-04-08T21:07:19-04:002025-04-10|Compliance, Regulatory, and Legal Requirements, Implementation of Security Controls|0 Comments

Secure Data Sanitization in Cloud Environments: A Technical Perspective Aligned with NIST 800-88
Gallery
Secure Data Sanitization in Cloud Environments: A Technical Perspective Aligned with NIST 800-88

Compliance, Regulatory, and Legal Requirements

Secure Data Sanitization in Cloud Environments: A Technical Perspective Aligned with NIST 800-88

In an era of pervasive cloud computing and virtualized storage, [...]

By Pavel Yermalovich|2025-04-08T21:07:38-04:002025-04-09|Compliance, Regulatory, and Legal Requirements|0 Comments