Guiselle Armstrong

Experience

Sat, 25 Apr 2026 00:00:00 +0000

Volunteer

Sat, 25 Apr 2026 00:00:00 +0000

⚡️ Turn Jupyter Notebooks into Blog Posts

Mon, 15 Jul 2024 00:00:00 +0000

As a researcher or data scientist, your work often lives in Jupyter Notebooks. But sharing those insights effectively usually means taking screenshots, messy copy-pasting, or exporting to PDF.

Hugo Blox changes that. With the {{< notebook >}} shortcode, you can render your actual .ipynb files directly as beautiful, interactive blog posts or project pages. Keep your code, outputs, and narrative in one place.

Table of Contents

Why publish notebooks?

Tip

Reproducible Research: By publishing the actual notebook, you allow others to download and run your code, verifying your results and building upon your work.

No more screenshots – Render crisp code and vector plots directly from your source.
Theme consistent – Notebooks automatically adapt to your site’s theme (including dark mode).
Flexible sourcing – Display notebooks from your assets/ folder, page bundles, or even directly from a remote GitHub URL.
Interactive – Users can copy code blocks or download the full notebook to run locally.

Example: Data Science Workflow

Below is a live example of a notebook rendered right here in this post. Notice how the markdown, code, and outputs (text, HTML, and JSON) are all preserved and styled.

Launch Readiness Analysis

Python · Kernel: Python 3 · nbformat 4.5 · 6 cells

Download notebook

Language: Python
Version: 3.11
Kernel: Python 3 python3
nbformat: 4.5
Authors: Ownable CMS

Markdown

Ship Notebook Stories in Minutes

Hugo Blox Notebook renderer turns your .ipynb experiments into beautiful long-form posts. Use this sample to see how markdown, code, and outputs flow together.

Markdown

Drop notebooks inside assets/notebooks/ (or import them as page resources).
Reference them with {{</* notebook src="your.ipynb" */>}}.
Control code, outputs, metadata badges, and download links via shortcode params.

In [1]

demo quickstart

1
2
3
4
5
6


import math
accuracy = 0.982
print("Collecting data...")
print("Training notebook-ready block...")
print("Done!")
accuracy

Collecting data...
Training notebook-ready block...
Done!

0.982

In [2]

1
2


from IPython.display import HTML
HTML("<div style='font-family:Inter,ui-sans-serif;'><strong>Launch Readiness:</strong> <span style='color:#22c55e;'>98.2% confidence</span><br><em>Notebook blocks are theme-aware and dark-mode friendly.</em></div>")

Launch Readiness: 98.2% confidence
Notebook blocks are theme-aware and dark-mode friendly.

In [3]

metrics

1
2
3
4
5
6
7
8


metrics = {
 'metrics': {
 'engagement_rate': 0.73,
 'read_time_minutes': 4.6,
 'subscribers': 1280
 }
}
metrics

{
"metrics": {
"engagement_rate": 0.73,
"read_time_minutes": 4.6,
"subscribers": 1280
}
}

Markdown

Tip: Pair this block with Call-to-Action cards or the Embed shortcode to link to GitHub repos, datasets, or ARXIV preprints.

How to add a notebook

Save your notebook. Place your .ipynb file in assets/notebooks/ (for global access) or inside a page bundle (like content/blog/my-post/analysis.ipynb).
Add the shortcode. In any Markdown page, simply use: {{< notebook src="analysis.ipynb" >}}
Customize. You can hide code cells for non-technical audiences (show_code=false) or just show the output (show_outputs=true).

Important

Hugo Blox respects your privacy. Notebook rendering happens statically at build time—no third-party services required.

Next steps

Try it out: Drop one of your existing notebooks into this site and see how it looks.
Link your papers: Use the Embed shortcode to link your notebook to your latest arXiv preprint or GitHub repository.
Get help: Join the community on Discord or check the documentation.

Happy researching! 🚀

🎉 Easily create your own simple yet highly customizable blog

Fri, 27 Oct 2023 00:00:00 +0000

Welcome 👋

Table of Contents

Overview

The Hugo Blox website builder for Hugo, along with its starter templates, is designed for professional creators, educators, and teams/organizations - although it can be used to create any kind of site
The template can be modified and customised to suit your needs. It’s a good platform for anyone looking to take control of their data and online identity whilst having the convenience to start off with a no-code solution (write in Markdown and customize with YAML parameters) and having flexibility to later add even deeper personalization with HTML and CSS
You can work with all your favourite tools and apps with hundreds of plugins and integrations to speed up your workflows, interact with your readers, and much more

Get Started

Quick Start Guide

New to Hugo Blox? Follow these steps to get your site up and running in minutes!

👉 Create a new site
📚 Personalize your site
💬 Chat with the Hugo Blox community or Hugo community
🐦 Twitter: @MakeOwnable #MadeWithHugoBlox
💡 Request a feature or report a bug for Hugo Blox
⬆️ Updating Hugo Blox? View the Update Guide and Release Notes

Important

Remember to backup your site before making major updates!

Crowd-funded open-source software

To help us develop this template and software sustainably under the MIT license, we ask all individuals and businesses that use it to help support its ongoing maintenance and development via sponsorship.

As a token of appreciation for sponsoring, you can unlock these awesome rewards and extra features 🦄✨

Ecosystem

Bibtex To Markdown: Automatically import publications from BibTeX

Inspiration

Learn what other creators are building with this template.

Features

Enhanced Markdown Support

Hugo Blox now supports GitHub and Obsidian-style callouts! Use standard Markdown alert syntax like > [!NOTE] for better portability.

Page builder - Create anything with no-code blocks and elements
Edit any type of content - Blog posts, publications, talks, slides, projects, and more!
Create content in Markdown, Jupyter, or RStudio
Plugin System - Fully customizable color and font themes
Display Code and Math - Code syntax highlighting and LaTeX math supported
Integrations - Google Analytics, Disqus commenting, Maps, Contact Forms, and more!
Beautiful Site - Simple and refreshing one-page design
Industry-Leading SEO - Help get your website found on search engines and social media
Media Galleries - Display your images and videos with captions in a customizable gallery
Mobile Friendly - Look amazing on every screen with a mobile friendly version of your site
Multi-language - 35+ language packs including English, 中文, and Português
Multi-user - Each author gets their own profile page
Privacy Pack - Assists with GDPR
Stand Out - Bring your site to life with animation, parallax backgrounds, and scroll effects
One-Click Deployment - No servers. No databases. Only files.

Version Requirements

The new Markdown alert syntax requires Hugo v0.132.0 or later. Make sure you’re using a compatible version!

Themes

Hugo Blox and its templates come with automatic day (light) and night (dark) mode built-in. Visitors can choose their preferred mode by clicking the sun/moon icon in the header.

Choose a stunning theme and font for your site. Themes are fully customizable.

License

Released under the MIT license.

🧠 Sharpen your thinking with a second brain

Thu, 26 Oct 2023 00:00:00 +0000

Create a personal knowledge base and share your knowledge with your peers.

Hugo Blox web framework empowers you with one of the most flexible note-taking capabilities out there.

Create a powerful knowledge base that works on top of a local folder of plain text Markdown files.

Use it as your second brain, either publicly sharing your knowledge with your peers via your website, or via a private GitHub repository and password-protected site just for yourself.

Mindmaps

Hugo Blox supports a Markdown extension for mindmaps.

With this open format, can even edit your mindmaps in other popular tools such as Obsidian.

Simply insert a Markdown code block labelled as markmap and optionally set the height of the mindmap as shown in the example below.

Mindmaps can be created by simply writing the items as a Markdown list within the markmap code block, indenting each item to create as many sub-levels as you need:

renders as

- Hugo Modules
- Hugo Blox
- netlify
- netlify-cms
- slides

Anh here’s a more advanced mindmap with formatting, code blocks, and math:

renders as

- Mindmaps
- Links
- [Hugo Blox Docs](https://docs.hugoblox.com/)
- [Discord Community](https://discord.gg/z8wNYzb)
- [GitHub](https://github.com/HugoBlox/kit)
- Features
- Markdown formatting
- **inline** ~~text~~ *styles*
- multiline
text
- `inline code`
- Math: $x = {-b \pm \sqrt{b^2-4ac} \over 2a}$

Highlighting

Highlight important text with mark:

<mark>Highlighted text</mark>

Callouts

Use callouts (aka asides, hints, or alerts) to draw attention to notes, tips, and warnings.

Use the > [!NOTE] syntax to create a callout.

> [!NOTE]
> A Markdown aside is useful for displaying notices, hints, or definitions to your readers.

renders as

Note

A Markdown aside is useful for displaying notices, hints, or definitions to your readers.

Or use the warning callout type so your readers don’t miss critical details:

Warning

A Markdown aside is useful for displaying notices, hints, or definitions to your readers.

📈 Communicate your results effectively with the best data visualizations

Wed, 25 Oct 2023 00:00:00 +0000

Hugo Blox is designed to give technical content creators a seamless experience. You can focus on the content and Hugo Blox handles the rest.

Use popular tools such as Plotly, Mermaid, and data frames.

Embed Rich Content

HuggingFace Model

google/embeddinggemma-300m

sentence-similarity

1.95828M

1.664k

HuggingFace Dataset

fka/prompts.chat

dataset

a.k.a. Awesome ChatGPT Prompts This is a Dataset Repository mirror of prompts.chat — a social platform for AI prompts. 📢 Notice This Hugging Face dataset is a mirror. For the …

38.894k

9.702k

GitHub Repository

kit

by HugoBlox • HTML

🧱 Describe your site, AI builds it, you own it as Markdown. Snap together Tailwind blocks like Lego — landing pages, blogs, portfolios, docs & more. No AI slop. Free to deploy anywhere 👇

2.938k

9.442k

academic blog documentation-tool +17

Custom embed with manual data

My Custom Resource

example.com

A great resource for learning

Custom Images

Embed beautiful images from any source with Hugo image processing (Unsplash, custom URLs, etc.):

Data Visualization Guide

example.com

Beautiful data visualization workspace

You can also add images to any platform embed:

plotly.py

by plotly • Python

The interactive graphing library for Python ✨

2.806k

757

18.551k

d3 dashboard declarative +11

Charts

Hugo Blox supports the popular Plotly format for interactive data visualizations. With Plotly, you can design almost any kind of visualization you can imagine!

Save your Plotly JSON in your page folder, for example line-chart.json, and then add the {{< chart data="line-chart" >}} shortcode where you would like the chart to appear.

Demo:

You might also find the Plotly JSON Editor useful.

Diagrams

Hugo Blox supports the Mermaid Markdown extension for diagrams.

An example flowchart:

```mermaid
graph TD
A[Hard] -->|Text| B(Round)
B --> C{Decision}
C -->|One| D[Result 1]
C -->|Two| E[Result 2]
```

renders as

graph TD A[Hard] -->|Text| B(Round) B --> C{Decision} C -->|One| D[Result 1] C -->|Two| E[Result 2]

An example sequence diagram:

```mermaid
sequenceDiagram
Alice->>John: Hello John, how are you?
loop Healthcheck
John->>John: Fight against hypochondria
end
Note right of John: Rational thoughts!
John-->>Alice: Great!
John->>Bob: How about you?
Bob-->>John: Jolly good!
```

renders as

sequenceDiagram Alice->>John: Hello John, how are you? loop Healthcheck John->>John: Fight against hypochondria end Note right of John: Rational thoughts! John-->>Alice: Great! John->>Bob: How about you? Bob-->>John: Jolly good!

An example class diagram:

```mermaid
classDiagram
Class01 <|-- AveryLongClass : Cool
Class03 *-- Class04
Class05 o-- Class06
Class07 .. Class08
Class09 --> C2 : Where am i?
Class09 --* C3
Class09 --|> Class07
Class07 : equals()
Class07 : Object[] elementData
Class01 : size()
Class01 : int chimp
Class01 : int gorilla
Class08 <--> C2: Cool label
```

renders as

classDiagram Class01 <|-- AveryLongClass : Cool Class03 *-- Class04 Class05 o-- Class06 Class07 .. Class08 Class09 --> C2 : Where am i? Class09 --* C3 Class09 --|> Class07 Class07 : equals() Class07 : Object[] elementData Class01 : size() Class01 : int chimp Class01 : int gorilla Class08 <--> C2: Cool label

An example state diagram:

```mermaid
stateDiagram
[*] --> Still
Still --> [*]
Still --> Moving
Moving --> Still
Moving --> Crash
Crash --> [*]
```

renders as

stateDiagram [*] --> Still Still --> [*] Still --> Moving Moving --> Still Moving --> Crash Crash --> [*]

Data Frames

Save your spreadsheet as a CSV file in your page’s folder and then render it by adding the Table shortcode to your page:

{{< table path="results.csv" header="true" caption="Table 1: My results" >}}

renders as

Table 1: My results
customer_id	score
1	0
2	0.5
3	1

Interactive Buttons

Add engaging call-to-action buttons to your data visualization posts:

Basic Buttons

Learn Plotly

{{< button url="/" >}}Contact Us{{< /button >}}

{{< button url="https://plotly.com/python/" new_tab="true" style="secondary" >}}Learn Plotly{{< /button >}}

Styled Buttons for Data Actions

View Dashboard

Download Data

View Source Code

{{< button url="#" style="primary" size="lg" align="center" icon="chart-bar" >}}View Dashboard{{< /button >}}

{{< button url="/data/results.csv" style="outline" icon="document-arrow-down" >}}Download Data{{< /button >}}

{{< button url="https://github.com/HugoBlox" new_tab="true" style="ghost" icon="arrow-top-right-on-square" icon_position="right" >}}View Source Code{{< /button >}}

Multiple Aligned Buttons

Try Jupyter

Open in Colab

{{< button url="https://jupyter.org/" new_tab="true" style="secondary" rounded="full" align="center" >}}Try Jupyter{{< /button >}}

{{< button url="https://colab.research.google.com/" new_tab="true" style="primary" rounded="full" align="center" icon="rocket-launch" >}}Open in Colab{{< /button >}}

👩🏼‍🏫 Teach academic courses

Tue, 24 Oct 2023 00:00:00 +0000

HugoBlox Kit is designed to give technical content creators a seamless experience. You can focus on the content and the HugoBlox Kit which this template is built upon handles the rest.

Embed videos, podcasts, code, LaTeX math, and even test students!

On this page, you’ll find some examples of the types of technical content that can be rendered with Hugo Blox.

Citation

Here’s an example of citing a publication using the cite shortcode:

You can also use the default view by omitting the view parameter:

Video

Teach your course by sharing videos with your students. Choose from one of the following approaches:

Youtube:

{{< youtube D2vj0WcvH5c >}}

Bilibili:

{{< bilibili BV1WV4y1r7DF >}}

Video file

Videos may be added to a page by either placing them in your assets/media/ media library or in your page’s folder, and then embedding them with the video shortcode:

{{< video src="my_video.mp4" controls="yes" >}}

Podcast

You can add a podcast or music to a page by placing the MP3 file in the page’s folder or the media library folder and then embedding the audio on your page with the audio shortcode:

{{< audio src="ambient-piano.mp3" >}}

Try it out:

Test students

Provide a simple yet fun self-assessment by revealing the solutions to challenges with the spoiler shortcode:

{{< spoiler text="👉 Click to view the solution" >}}
You found me!
{{< /spoiler >}}

renders as

👉 Click to view the solution

You found me 🎉

Math

HugoBlox Kit supports a Markdown extension for $\LaTeX$ math. Enable math by setting the math: true option in your page’s front matter, or enable math for your entire site by toggling math in your config/_default/params.yaml file:

features:
 math:
 enable: true

To render inline or block math, wrap your LaTeX math with $...$ or $$...$$, respectively.

Example math block:

$$
\gamma_{n} = \frac{ \left | \left (\mathbf x_{n} - \mathbf x_{n-1} \right )^T \left [\nabla F (\mathbf x_{n}) - \nabla F (\mathbf x_{n-1}) \right ] \right |}{\left \|\nabla F(\mathbf{x}_{n}) - \nabla F(\mathbf{x}_{n-1}) \right \|^2}
$$

renders as

$$\gamma_{n} = \frac{ \left | \left (\mathbf x_{n} - \mathbf x_{n-1} \right )^T \left [\nabla F (\mathbf x_{n}) - \nabla F (\mathbf x_{n-1}) \right ] \right |}{\left |\nabla F(\mathbf{x}{n}) - \nabla F(\mathbf{x}{n-1}) \right |^2}$$

Example inline math $\nabla F(\mathbf{x}_{n})$ renders as $\nabla F(\mathbf{x}_{n})$.

Example multi-line math using the math linebreak (\\):

$$f(k;p_{0}^{*}) = \begin{cases}p_{0}^{*} & \text{if }k=1, \\
1-p_{0}^{*} & \text{if }k=0.\end{cases}$$

renders as

$$ f(k;p_{0}^{}) = \begin{cases}p_{0}^{} & \text{if }k=1, \ 1-p_{0}^{*} & \text{if }k=0.\end{cases} $$

Code

HugoBlox Kit utilises Hugo’s Markdown extension for highlighting code syntax. The code theme can be selected in the config/_default/params.yaml file.

```python
import pandas as pd
data = pd.read_csv("data.csv")
data.head()
```

renders as

import pandas as pd
data = pd.read_csv("data.csv")
data.head()

Inline Images

{{< icon name="python" >}} Python

renders as

Python

✅ Manage your projects

Mon, 23 Oct 2023 00:00:00 +0000

Easily manage your projects - create ideation mind maps, Gantt charts, todo lists, and more!

Ideation

Hugo Blox supports a Markdown extension for mindmaps.

Simply insert a Markdown code block labelled as markmap and optionally set the height of the mindmap as shown in the example below.

Mindmaps can be created by simply writing the items as a Markdown list within the markmap code block, indenting each item to create as many sub-levels as you need:

renders as

- Hugo Modules
- Hugo Blox
- netlify
- netlify-cms
- slides

Diagrams

Hugo Blox supports the Mermaid Markdown extension for diagrams.

An example Gantt diagram:

```mermaid
gantt
section Section
Completed :done, des1, 2014-01-06,2014-01-08
Active :active, des2, 2014-01-07, 3d
Parallel 1 : des3, after des1, 1d
Parallel 2 : des4, after des1, 1d
Parallel 3 : des5, after des3, 1d
Parallel 4 : des6, after des4, 1d
```

renders as

gantt section Section Completed :done, des1, 2014-01-06,2014-01-08 Active :active, des2, 2014-01-07, 3d Parallel 1 : des3, after des1, 1d Parallel 2 : des4, after des1, 1d Parallel 3 : des5, after des3, 1d Parallel 4 : des6, after des4, 1d

Todo lists

You can even write your todo lists in Markdown too:

- [x] Write math example
 - [x] Write diagram example
- [ ] Do something else

renders as

Write math example
- Write diagram example
Do something else

Audit Readiness & GRC Program Enablement

Tue, 01 Aug 2023 00:00:00 +0000

Focus Areas: SOC 2 · PCI DSS · CCPA · ISO/IEC 27001

Focused on transforming audit readiness from a reactive, audit-season effort into a continuous, well-governed program aligned with SOC 2, PCI DSS, CCPA, and ISO/IEC 27001 principles. I led cross-functional efforts to improve visibility into risk, standardize evidence management, automate governance workflows, and strengthen collaboration between business teams, technical teams, and auditors.

Experience

Established Executive-Level GRC Visibility

Designed and automated a Power BI GRC Executive Dashboard providing leadership with monthly visibility into key compliance and risk metrics
Tracked user access reviews, policy exceptions, audit artifacts, remediation activity, and vulnerability trends
Enabled continuous monitoring, management review, and risk-based decision-making

Strengthened Access Controls & Resiliency

Partnered with departments to complete and document User Access Reviews (UARs)
Developed and maintained Disaster Recovery documentation aligned with audit and availability requirements
Ensured access controls and recovery practices were clearly defined, owned, and consistently audit-ready

Operationalized Privacy & Regulatory Compliance (CCPA)

Supported privacy access removals and data rights requests using OneTrust
Ensured requests were processed within regulatory timelines and documented with appropriate approvals
Maintained defensible evidence aligned with SOC 2 Privacy and ISO data protection controls

Centralized Evidence Management & Audit Support

Gathered, validated, and archived audit artifacts from multiple business and technical teams
Maintained organized evidence repositories to support internal audits, SOC 2, PCI DSS, and regulatory assessments
Actively participated in QSA and auditor meetings, helping translate control intent, clarify scope, and resolve gaps efficiently

Supported Audit Findings & Timely Remediation (MAPS)

Assisted teams in reviewing and addressing audit (MAPS) findings
Partnered with control owners to identify root causes, define corrective actions, and track remediation efforts
Ensured findings were remediated within required timelines and supported with appropriate evidence to meet audit expectations

Implemented Policy Exception Governance

Created and facilitated a weekly policy exception review meeting with cross-functional stakeholders
Built a Power Automate workflow and dashboard to track exception approvals and notify owners of upcoming expirations
Documented risk acceptance decisions and communicated outcomes to leadership to maintain a clear audit trail

Enabled PCI DSS Compliance Through Training

Designed and delivered PCI DSS training for employees involved in payment processing and credit card handling
Reinforced secure handling practices, role-based responsibilities, and compliance expectations
Supported ongoing audit readiness and reduced compliance risk

Developed People & GRC Capability

Trained, mentored, and empowered early-career cybersecurity engineers
Helped teams understand how technical controls support SOC 2, PCI DSS, and ISO requirements
Strengthened long-term ownership and accountability for controls across the organization

Impact & Results

Improved continuous audit readiness across SOC 2, PCI DSS, privacy, and internal audit programs
Reduced audit friction by proactively addressing MAPS findings and control gaps
Increased leadership visibility into compliance health and remediation status
Strengthened collaboration between security, IT, legal, and business teams
Built scalable, repeatable governance processes that supported consistent audit outcomes

Vulnerability Management & Risk Reduction Program

Wed, 01 Mar 2023 00:00:00 +0000

Framework Alignment: SOC 2 & ISO/IEC 27001

Objective: Reduce organizational risk by preventing vulnerable assets from entering production and ensuring timely, well‑governed remediation across infrastructure, databases, and endpoints

Overview

Established vulnerability management as a preventive, risk‑based control integrated into both production readiness and ongoing operations. The program aligned technical vulnerability scanning, remediation scheduling, and patch validation to SOC 2 and ISO/IEC 27001 expectations, ensuring vulnerabilities were identified early, prioritized appropriately, and remediated in a controlled, auditable manner.

How I Approached Vulnerability Risk Management

Preventive Vulnerability Controls & Production Readiness

Executed enterprise vulnerability scans using Qualys and Nessus
Performed mandatory vulnerability scans on all new server builds prior to production deployment
Ensured systems met baseline security requirements before promotion to production, supporting preventive controls under SOC 2 CC7 and ISO operational security principles

Continuous Risk Monitoring & Leadership Visibility (SOC 2 CC4 | ISO Clause 9)

Designed and delivered a Power BI Vulnerability Management Dashboard
Provided visibility into open vulnerabilities, remediation progress, and vulnerability burndown trends
Enabled management review and continuous monitoring of security risk posture

Clear Ownership & Accurate Data Mapping (SOC 2 CC3 | ISO Clause 6)

Parsed vulnerability scan outputs using Python to accurately map vulnerabilities to specific devices and responsible owners
Delivered owner‑specific remediation views to reduce noise and increase accountability
Improved data integrity for both remediation tracking and audit evidence

Risk‑Based Prioritization & Zero‑Day Response (SOC 2 CC5 | ISO Risk Treatment)

Prioritized vulnerabilities based on severity, exploitability, and active threat intelligence, including zero‑day exploitation
Focused remediation efforts on vulnerabilities posing the highest risk to confidentiality, integrity, and availability
Ensured remediation decisions aligned with documented risk tolerance and audit expectations

Cross‑Team Remediation Scheduling & Governance (SOC 2 CC7 | ISO Clause 8)

Collaborated closely with server, database, and endpoint teams to establish structured vulnerability remediation schedules
Coordinated remediation timelines based on system criticality, exposure, and operational impact
Facilitated recurring remediation discussions to track progress and remove blockers

Patch Testing & Controlled Deployment

Worked directly in SCCM and Patch My PC to validate and test patches prior to production rollout
Ensured patches were tested for stability and compatibility before deployment
Supported controlled, auditable patch management processes aligned with ISO patch management and SOC 2 system operations controls

Audit & GRC Integration

Ensured vulnerability remediation activities, approvals, and outcomes were documented and retained as audit evidence
Demonstrated continuous monitoring, risk treatment, and control effectiveness during audits
Integrated vulnerability management metrics into broader GRC and audit readiness reporting

Impact & Results

Prevented insecure servers from entering production environments
Reduced time‑to‑remediate for high‑risk and zero‑day vulnerabilities
Improved coordination and accountability across infrastructure, database, and endpoint teams
Strengthened patch governance through testing and controlled deployment
Provided clear, defensible evidence of vulnerability management controls during SOC 2 and ISO‑aligned audits

Change Management & Controlled Release Governance

Wed, 01 Jun 2022 00:00:00 +0000

Framework Alignment: SOC 2 (CC7) & ISO/IEC 27001

Objective: Ensure all system and application changes were authorized, risk‑assessed, tested, documented, and deployed in a controlled manner to protect system availability, security, and compliance posture

Overview

Focused on strengthening organizational change management practices to meet SOC 2 CC7 and ISO change control expectations. The goal was to ensure that changes were not only implemented successfully, but also governed in a way that reduced operational risk, protected sensitive data, and produced defensible audit evidence. My work emphasized education, structured governance, and cross‑functional collaboration to embed change management into daily operations.

How I Applied SOC 2 & ISO Change Control Principles

Established Controlled Change Processes (SOC 2 CC7 | ISO Change Controls)

Trained department managers and stakeholders on how to properly submit change documentation in alignment with formal change control requirements
Ensured all changes included required elements such as testing evidence, risk assessments, business justification, and approvals
Reinforced that changes must be authorized, reviewed, and traceable prior to implementation

Led Change Advisory Board (CAB) Governance (SOC 2 CC7.2 | ISO Authorization & Review)

Led daily CAB meetings, facilitating structured reviews of proposed changes
Evaluated changes for risk, timing conflicts, dependencies, and potential impact to availability and security
Ensured approval decisions, conditions, and outcomes were clearly documented for audit purposes

Ensured Change Documentation Integrity & Data Protection

Reviewed and revised submitted change records to ensure completeness, accuracy, and audit readiness
Verified inclusion of testing results, risk assessments, and formal business approvals
Ensured no PII or PCI data was included in change documentation, reducing data exposure risk and supporting regulatory compliance

Coordinated Secure & Successful Releases (SOC 2 CC7 | ISO Operational Change)

Worked closely with release and deployment teams to verify that approved changes were deployed as planned
Supported coordination, communication, and scheduling to minimize disruption
Assisted with post‑implementation validation to confirm change success and stability

Advised on Risk, Impact, and Organizational Readiness

Acted as a trusted advisor to teams on how uncontrolled or poorly documented changes can impact availability, security, audit results, and customer trust
Educated stakeholders on the importance of structured change management as a core operational and compliance control
Strengthened awareness that change management is a shared responsibility supporting the organization as a whole

Impact & Results

Improved consistency and quality of change documentation across departments
Reduced operational risk from unauthorized or insufficiently tested changes
Supported system stability and availability during deployments
Strengthened evidence for SOC 2 and ISO‑aligned audits
Increased organizational understanding of change as a critical governance control

Guiselle Armstrong

Experience

Volunteer

⚡️ Turn Jupyter Notebooks into Blog Posts

Why publish notebooks?

Example: Data Science Workflow

Ship Notebook Stories in Minutes

How to add a notebook

Next steps

🎉 Easily create your own simple yet highly customizable blog

Overview

Get Started

Crowd-funded open-source software

❤️ Click here to become a sponsor and help support Hugo Blox’s future ❤️

Ecosystem

Inspiration

Features

Themes

License

🧠 Sharpen your thinking with a second brain

Mindmaps

Highlighting

Callouts

Did you find this page helpful? Consider sharing it 🙌

📈 Communicate your results effectively with the best data visualizations

Embed Rich Content

google/embeddinggemma-300m

fka/prompts.chat

kit

My Custom Resource

Custom Images

Data Visualization Guide

plotly.py

Charts

Diagrams

Data Frames

Interactive Buttons

Basic Buttons

Styled Buttons for Data Actions

Multiple Aligned Buttons

Did you find this page helpful? Consider sharing it 🙌

👩🏼‍🏫 Teach academic courses

Citation

Video

Podcast

Test students

Math

Code

Inline Images

Did you find this page helpful? Consider sharing it 🙌

✅ Manage your projects

Ideation

Diagrams

Todo lists

Did you find this page helpful? Consider sharing it 🙌

Audit Readiness & GRC Program Enablement

Experience

Impact & Results

Vulnerability Management & Risk Reduction Program

Overview

How I Approached Vulnerability Risk Management

Impact & Results

Change Management & Controlled Release Governance

Overview

How I Applied SOC 2 & ISO Change Control Principles

Impact & Results