Cybersecurity governance, GRC, and AI security research

Research

My research focuses on bridging academic theory with practical cybersecurity governance, enabling organizations to innovate securely while strengthening resilience, digital trust, and responsible adoption of emerging technologies.

Research areas

Cybersecurity Governance
Governance, Risk and Compliance (GRC)
AI Governance
AI Security
AI Risk Management
Agent Governance
Digital Trust
Digital Transformation Governance
Information Security Governance
Data Governance
Data Classification and Information Protection
Privacy Engineering
Network Security
Security Architecture
Zero Trust Architecture
Cloud Security Governance
Identity and Access Management (IAM)
Encryption and Cryptography
Post-Quantum Cryptography
Cyber Resilience
Enterprise Risk Management
Security Metrics and Maturity Models
Regulatory Compliance
ISO/IEC 27001
ISO/IEC 42001
NIST Cybersecurity Framework
Secure Software Governance
Supply Chain Cybersecurity
Third-Party Risk Management
Operational Technology (OT) Security Governance
Cybersecurity Strategy
Innovation Governance
Emerging Technologies Governance
Responsible AI
Human-Centered Cybersecurity
Leadership in Cybersecurity
Women in STEM Leadership
Youth STEM Leadership
Cybersecurity Education
Professional Development in Cybersecurity

Doctoral dissertation

Designing Adaptive Cybersecurity Governance Architectures: A Layered GRC Framework for Resilient Digital Transformation

Completed July 2026.

Publications & preprints

A Practical Framework for Adaptive Data Classification in Cybersecurity
SSRN Preprint · 2026
AI-Driven Adaptive Data Classification for Quantum-Resilient Cybersecurity Architectures
SSRN Preprint · 2026
Challenges of Implementing Data Classification Frameworks in Large Organizations: A Practical Governance-Driven Approach
SSRN Preprint · 2026
Design of Turbo-NAFS: A Quantum-Resilient Encryption Scheme Based on Functional Superposition
SSRN Preprint · 2026
Cybersecurity Governance vs IT Governance: Why Conflating the Two Weakens Organizational Resilience
Zenodo Preprint · 2026
Defining Cybersecurity Roles and Responsibilities Across Organizational Size and Criticality: A Governance-Oriented Framework for Public and Private Sectors
Zenodo Preprint · 2026

View full record on ORCID

Get in touch about research