Research & papers

Cyber Assessment: Assessing National Strategies, Objectives and Digital Capabilities — Greece

NYU MSGSCC — Cyber Strategy, Planning & Policy · Fall 2021

Researched Greece's national cyber capabilities, strategies, objectives, and digital capabilities. Analyzed cyber operations and the attribution of actions to actors, interpreted and applied applicable laws and policies to malicious cyber activity, assessed strategic needs, and made recommendations to govern cyber activities with estimates of the country's future environment.

Cyber Security in the U.S. Financial Services Sector

NYU MSGSCC — Global Security, Conflict & Cybercrime · Spring 2022

Analyzes the threat landscape facing U.S. financial services — criminal and nation-state actors, systemic risk, and the regulatory frameworks shaping the sector's security posture.

Nation-State Ransomware Attacks — Policy Memo & Briefing to a U.S. National Security Council Audience

NYU MSGSCC — Cyber Policy · Fall 2021

Policy memo and briefing for a National Security Council audience examining the rise of nation-state ransomware, its strategic implications, and the policy options available to the United States for response and deterrence.

Colonial Pipeline — Cyber Security Risk Management and Lessons Learned

NYU MSGSCC — Cyber Risk · Fall 2021

Examines the Colonial Pipeline ransomware attack through a risk-management lens: how the intrusion succeeded, the decisions that followed, and the governance and resilience lessons for critical-infrastructure operators.

Op-Ed: The Most Serious Cyber Resilience Issue Private-Sector Corporations Face Today

NYU MSGSCC — Cyber Resilience · Fall 2020

Op-ed on the most serious cyber resilience issue facing private-sector corporations today: the rapid growth of emerging technologies against the disadvantages of legacy systems and equipment.

Mission Assurance and Continuity of Operations — Failure Mode and Effects Analysis (Cyber)

NYU MSGSCC — Critical Infrastructure & Resilience · Fall 2020

Analyzes technical and operational vulnerabilities proliferating into business operations from OT and IT systems of a cyber-physical system. Applies NIST 800-53 framework security controls and develops a resilient PACE plan for continuity of operations.