Topic

Best Practices

In-depth guides and analysis on best practices from the Safeguard engineering team.

252 articles

Vendor Incident Coordination In The 72-Hour Window

Most vendor incidents go badly because the first 72 hours are spent figuring out who to call. A pre-built coordination playbook turns chaos into a rehearsed response.

Apr 4, 20267 min read

Best Practices

Buyer Guide: Software Supply Chain Security 2026

A senior-engineer buyer guide for software supply chain security in 2026: what the categories mean, what to test, and what to ignore in vendor pitches.

Apr 4, 20269 min read

Best Practices

Oncall Rotation Design For Modern SecOps

Oncall rotations break for SecOps because the work is asynchronous and the alerts are noisy. Here is a rotation design that respects both, with the tooling to back it up.

Apr 3, 20266 min read

Best Practices

Break-Glass Workflow Design: Audited Bypass That Works

Every policy needs a bypass path or it will be routed around. The trick is making the bypass auditable, time-bound, and rare enough to remain meaningful.

Mar 31, 20267 min read

Best Practices

Best Secret Scanning Tools 2026 Comparison

A senior-engineer view of secret-scanning tools worth running in 2026: what TruffleHog, Gitleaks, GitGuardian, and platform-native scanners actually do well.

Mar 31, 20269 min read

Best Practices

Finding Forgotten Public npm Packages In Your Org

Public npm packages your org published years ago are now an attacker's best targets. Find them before someone else does.

Mar 30, 20267 min read

Best Practices

TPRM Vendor Tiering By Blast Radius Not Spend

Most TPRM programs tier vendors by spend. That misses the vendors who are cheap but catastrophic when they fail. Tiering by blast radius is the fix.

Mar 30, 20267 min read

Best Practices

Purple Team Exercises With Supply Chain Focus

Most purple team exercises stop at the perimeter. A supply-chain-focused exercise probes the dependency graph, the build pipeline, and the trust assumptions in your SBOM.

Mar 29, 20266 min read

Best Practices

Incident Response for Supply Chain Attacks: A 2026 Playbook

A practical incident response playbook tailored for supply chain compromises — from initial detection through containment, eradication, and lessons learned.

Mar 28, 20268 min read

Best Practices

Runtime Drift Detection For Supply Chain Controls

An admitted workload is not a static one. Runtime drift detection turns the SBOM into a living contract and surfaces supply chain changes before they become incidents.

Mar 26, 20267 min read

Best Practices

Flowing Down CMMC And CRA Clauses To Vendors

CMMC 2.0 and the EU Cyber Resilience Act both require obligations to flow down through your supply chain. Here is how to write the clauses and verify the compliance.

Mar 25, 20267 min read

Best Practices

Unifying Software And AI Assets In One Graph

Two parallel inventories for software and AI assets do not survive contact with reality. A unified graph is what makes governance feasible.

Mar 25, 20267 min read