About

Tribal Knowledge Inc is the independent practice of Kumar Mathialagan, a security and compliance practitioner based in Alberta, Canada.

Background

I've spent about 15 years in cybersecurity and governance, risk and compliance across regulated industries: healthcare, banking, telecom and IT services. Along the way I've worked with HCL Technologies, Fidelity Investments, Abu Dhabi Commercial Bank and T-Mobile.

Credentials

• CISSP
• CISA
• CISM
• CRISC
• ISO/IEC 42001 Lead Implementer

What I work on

• AI security operating models and AI governance (ISO/IEC 42001, NIST AI RMF)
• Threat modelling with STRIDE and MITRE ATT&CK
• Compliance programmes: PCI DSS, SOC 2 and ISO 27001
• Agentic AI architecture, and helping security teams use AI safely

Open work

• B.R.I.D.G.E.: an AI security operating model
• A PCI DSS v4.0.1 skill library for Claude
• A crosswalk from the OWASP Top 10 for LLM Applications to STRIDE

How I write

Each post makes one recommendation you can act on, cites primary sources, and says plainly when something is my opinion. AI helps with research and drafting; I review and edit everything before it's published.

Views on this site are my own and do not represent any current or former employer.