Acuity Health Enterprise Security Architecture: Hotwash Synthesis

The definitive synthesis and lessons-learned hotwash uniting enterprise architecture, DevSecOps, active defense, forensics, CTI, and governance into a master healthcare security blueprint.

August 10, 2026 · 29 min · 6146 words · Joshua Wortz

Healthcare Privacy Law, Regulatory Compliance & Cybersecurity Governance

A legal and governance framework navigating HIPAA Security and Privacy rules, state breach notification statutes, and executive CISO ROI leadership.

August 2, 2026 · 8 min · 1491 words · Joshua Wortz

Instituting Cyber Threat Intelligence: Predictive Blue-Team Operations

Operational blueprint for establishing a CTI program in a cloud-hosted healthcare provider, featuring threat platform evaluations and dynamic flare response.

July 26, 2026 · 9 min · 1750 words · Joshua Wortz

Healthcare Incident Response, Computer Network Forensics & Containment

Digital forensics investigation and chain-of-custody framework analyzing an unauthorized EHR database breach involving VIP patient healthcare records.

July 20, 2026 · 14 min · 2768 words · Joshua Wortz

Active Blue-Team Defense, Applied Cryptography & Security Operations

An active defense architecture integrating cryptographic key rotation, honeytokens, canary credentials, and proactive blue team threat hunting across clinical healthcare networks.

July 13, 2026 · 9 min · 1833 words · Joshua Wortz

Designing a Secure Software Development Program: Acuity Health AppSec Framework

An engineering framework operationalizing NIST SP 800-218 (SSDF), CI/CD quality gates, and OWASP API security defenses in a healthcare delivery organization.

July 6, 2026 · 10 min · 1961 words · Joshua Wortz

Enterprise Healthcare Security Architecture: The Acuity Health Blueprint

Enterprise security architecture and Zero Trust blueprint for an expanding urgent care network under NIST SP 800-207 and the SABSA Multi-Tiered framework.

June 29, 2026 · 13 min · 2723 words · Joshua Wortz

Kerberos Protocol Authentication: Ticket Granting, Mutual Authentication, and Blue Team Hardening

Kerberos is a robust network authentication protocol, but its implementation in modern Active Directory (AD) environments suffers from critical vulnerabilities, primarily due to legacy configuration support and its inher…

June 22, 2026 · 7 min · 1454 words · Joshua Wortz

Cryptographic Key Metadata, Revocation Protocols, and Key Management Systems

While cryptographic algorithms provide the mathematical foundation for data confidentiality and integrity, their effectiveness relies entirely on how the underlying cryptographic keys are generated, distributed, and prot…

June 15, 2026 · 8 min · 1600 words · Joshua Wortz

Public-Key Cryptography, Digital Signatures, and Certificate Infrastructures

To establish a functional public-key cryptography environment, Thunderbird was installed and configured to use OpenPGP. Using Thunderbird’s built-in End-To-End Encryption settings, a personal OpenPGP key pair was success…

June 8, 2026 · 5 min · 900 words · Joshua Wortz