Skip to content
View Johnbjoseph-cybersec's full-sized avatar
16 followers · 1 following

Block or report Johnbjoseph-cybersec

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Johnbjoseph-cybersec/README.md

John B Joseph

Co-founder & CPTO, Purplecop Security · johnbjoseph-cybersec.github.io

AI security · AI governance · Post-quantum readiness

I lead product and technology at Purplecop Security, where we build compliance automation for GRC, AI governance and privacy. My work sits where three shifts meet: AI agents acting on real systems, AI regulation becoming enforceable, and the move to post-quantum cryptography. Each one turns into the same question for a security leader. What control proves this is safe, and what evidence shows it is working?

Focus

Area What I work on
AI security Controls for AI agents: tool-call authorization, runtime governance, agent identity, audit trails that hold up
AI governance ISO/IEC 42001, the EU AI Act, NIST AI RMF and India's DPDP Act, turned into controls a team can actually operate
Post-quantum readiness Cryptographic inventory, crypto-agility and migration governance, framed as a risk programme rather than an algorithm swap
GRC engineering Continuous evidence instead of annual audits, controls as code, multi-framework crosswalks using NIST IR 8477 set-theory mapping

Built

Project
GRC Practice Lab 400+ controls across 9 frameworks, 11 guided scenarios, 12 portfolio projects and a full ISO 27001 Lead Implementer course. Free with an account. (source)
GRC Made Simple templates Practitioner-grade templates for ISO 27001, ISO 42001, SOC 2 and NIST CSF.

Teaching

GRC Made Simple teaches GRC for free: the GRC Practice Lab has 11,000+ active users in 34 countries.

Credentials

ISO/IEC 27001:2022 Lead Auditor · ISO/IEC 42001:2023 Lead Auditor · ISO/IEC 27701 Lead Auditor · CCEP · PrivacyOps · AI Security & Governance · AWS Solutions Architect · Qualys VMDR · TryHackMe Top 1%

Speaking

Virtual keynotes, panels and podcasts on securing AI agents, operationalising ISO/IEC 42001 and the EU AI Act, and post-quantum migration for security and GRC leaders.

Website: johnbjoseph-cybersec.github.io · Contact: linkedin.com/in/john-bj

Popular repositories Loading

  1. Johnbjoseph-cybersec.github.io Johnbjoseph-cybersec.github.io Public

    Source of the GRC Practice Lab (grclab.purplecop.io): 400+ controls across 9 frameworks, guided scenarios and a free ISO 27001 Lead Implementer course.

    HTML 9 11

  2. GRC-Playground GRC-Playground Public

    Forked from ashpearce/GRC-Playground

    A hands-on, real-world GRC lab series built for beginners and curious pros alike. No PDFs. No gatekeeping. Just practical labs for understanding controls, policy as code, and continuous authorization.

    Open Policy Agent 7 5

  3. Windows-Forensics-Projects-for-Beginners Windows-Forensics-Projects-for-Beginners Public archive

    Forked from 0xrajneesh/Windows-Forensics-Projects-for-Beginners

    Hands-on projects for beginners to learn and practice Windows forensics and essential cybersecurity skills

    1 2

  4. agent-control-standard agent-control-standard Public

    Forked from GenAI-Security-Project/agent-control-standard

    The open standard for runtime agent control — declarative hooks, policy enforcement, and observability across AI agent frameworks.

    TypeScript 1

  5. sysmon-config sysmon-config Public

    Forked from SwiftOnSecurity/sysmon-config

    Sysmon configuration file template with default high-quality event tracing

    1

  6. Packet-Whiz Packet-Whiz Public

    Forked from Omar-tamerr/Packet-Whiz

    A modern network forensics and packet analysis tool built for both security analysts and CTF players.

    Python 2