The field guide library
Four connected subjects
Identity, software, cryptography, and AI meet in the systems you operate. Follow a subject from the strategic question to the controls, evidence, and next decisions.
9 guides and field notes · Primary sources · Practical questions · Reviewed September 2026
Device & machine identity
Identify, update, isolate, and recover the systems you operate.
Explore this subjectSoftware assurance
Connect product evidence with what buyers and regulators need.
Explore this subjectCryptographic change
Find the dependencies before certificates and algorithms change.
- PQC readiness: the first five actions
- PQC migration: build the ability to change cryptography
- PKI operations: from renewal alerts to a managed service
AI trust in practice
Know what an agent can do, what constrains it, and what can be proved.
Explore this subjectThe connecting thread
One change can cross all four subjects.
A security update needs a known device, an approved build, working cryptography, and a clear record of who or what authorized it. The guides share that operating view while keeping each standard’s scope and each product’s requirements distinct.