Featured guide
Create and assess a risk
Learn how to complete CIA and FAIR assessments, add controls, assign treatment actions and manage risk exceptions.
Read the guideResearch is being prepared.
PurpleWASP research will focus on evidence-led guidance, practical GRC benchmarks and transparent methodology rather than invented catalogue volume.
What will be published here
This page intentionally avoids advertising unavailable resources. Items will be added only when the underlying content, registration or documentation is ready to use.
Methodology first
Each report will describe scope, evidence, limitations and how conclusions were reached.
Practical findings
Research will connect findings to operational decisions for policy, risk, asset and compliance teams.
Reusable tools
Where appropriate, reports will include checklists, models or worksheets that can be used immediately.