<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
  xmlns:xhtml="http://www.w3.org/1999/xhtml">
  <url>
    <loc>https://thoughts.sapiro.net/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/controls/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/defense/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/design-thinking/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/gaps/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/composability_defeats_security/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/security/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/technology/</loc>
    <lastmod>2023-03-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/decision-making/</loc>
    <lastmod>2021-12-27T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/heuristics/</loc>
    <lastmod>2021-12-27T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/heuristics_and_information_asymmetry/</loc>
    <lastmod>2021-12-27T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/risk/</loc>
    <lastmod>2021-12-27T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/vulnerabilities/</loc>
    <lastmod>2021-12-27T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/vulnerability-management/</loc>
    <lastmod>2021-12-27T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/risk-appetite/</loc>
    <lastmod>2021-12-26T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/risk-management/</loc>
    <lastmod>2021-12-26T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/risk_appetite_comes_from_incomplete_info/</loc>
    <lastmod>2021-12-26T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/speech/evanta_december_2021/</loc>
    <lastmod>2021-12-14T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/speech/</loc>
    <lastmod>2021-12-14T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/speech/</loc>
    <lastmod>2021-12-14T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/metrics/</loc>
    <lastmod>2021-11-22T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/remediate/</loc>
    <lastmod>2021-11-22T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/improving_mttr/</loc>
    <lastmod>2021-11-22T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/the_most_useful_metric/</loc>
    <lastmod>2021-11-21T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/speech/cvision_march_2021/</loc>
    <lastmod>2021-11-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/speech/fs_isac_june_2021/</loc>
    <lastmod>2021-11-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/supply-chain/</loc>
    <lastmod>2021-11-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/third-party-risk/</loc>
    <lastmod>2021-11-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/vendor/</loc>
    <lastmod>2021-11-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/vsaq/</loc>
    <lastmod>2021-11-05T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/culture/</loc>
    <lastmod>2021-11-04T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/governance/</loc>
    <lastmod>2021-11-04T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/policy/</loc>
    <lastmod>2021-11-04T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/trust_doesnt_scale/</loc>
    <lastmod>2021-11-04T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/users/</loc>
    <lastmod>2021-11-04T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/communication/</loc>
    <lastmod>2021-11-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/complexity_firewall/</loc>
    <lastmod>2021-11-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/governance/</loc>
    <lastmod>2021-11-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/risk-thinking/</loc>
    <lastmod>2021-11-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/process-and-not-tools-will-secure-the-digital-supply-chain/</loc>
    <lastmod>2021-01-03T22:15:36-05:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/third-party-security/</loc>
    <lastmod>2021-01-03T22:15:36-05:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/computing/</loc>
    <lastmod>2021-01-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/decisionability/</loc>
    <lastmod>2021-01-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/errata/</loc>
    <lastmod>2021-01-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/math/</loc>
    <lastmod>2021-01-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/errata/the-halting-problem/</loc>
    <lastmod>2021-01-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/solarwinds_microsoft/</loc>
    <lastmod>2021-01-01T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/breaches/</loc>
    <lastmod>2021-01-01T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/microsoft/</loc>
    <lastmod>2021-01-01T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/solarwinds/</loc>
    <lastmod>2021-01-01T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/assumptions/</loc>
    <lastmod>2020-12-30T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/memories/</loc>
    <lastmod>2020-12-30T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/timex_servers/</loc>
    <lastmod>2020-12-30T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/vendor_security_incentives/</loc>
    <lastmod>2020-12-29T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/supply-chain/</loc>
    <lastmod>2020-12-29T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/third-party/</loc>
    <lastmod>2020-12-29T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/downstream_exposure/</loc>
    <lastmod>2020-12-24T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/externality/</loc>
    <lastmod>2020-12-24T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/financials/</loc>
    <lastmod>2020-12-24T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/ideas/</loc>
    <lastmod>2020-12-24T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/malware/</loc>
    <lastmod>2020-12-24T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/roi_of_sunburst/</loc>
    <lastmod>2020-12-24T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/solarwinds_breach/</loc>
    <lastmod>2020-12-20T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/externalities_in_risk_models/</loc>
    <lastmod>2020-08-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/gdpr/</loc>
    <lastmod>2020-08-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/legal/</loc>
    <lastmod>2020-08-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/models/</loc>
    <lastmod>2020-08-03T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/acceptable_risk/</loc>
    <lastmod>2020-07-30T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/errata/risk_models/</loc>
    <lastmod>2020-07-30T00:00:00+00:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/legal/</loc>
    <lastmod>2020-07-26T19:23:21-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/the_one_risk/</loc>
    <lastmod>2020-07-26T08:57:45-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/customer_support_part2/</loc>
    <lastmod>2020-07-19T19:49:55-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/mvp/</loc>
    <lastmod>2020-07-19T19:49:55-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/saas/</loc>
    <lastmod>2020-07-19T19:49:55-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/categories/scalable-security/</loc>
    <lastmod>2020-07-19T19:49:55-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/trust/</loc>
    <lastmod>2020-07-19T19:49:55-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/twitter/</loc>
    <lastmod>2020-07-19T19:49:55-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/post/customer_support_part1/</loc>
    <lastmod>2020-07-19T19:49:51-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/enterprise/</loc>
    <lastmod>2020-07-19T19:49:51-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/third-party-security/</loc>
    <lastmod>2020-07-19T19:49:51-04:00</lastmod>
  </url><url>
    <loc>https://thoughts.sapiro.net/about/</loc>
  </url><url>
    <loc>https://thoughts.sapiro.net/library/</loc>
  </url><url>
    <loc>https://thoughts.sapiro.net/outlines/</loc>
  </url><url>
    <loc>https://thoughts.sapiro.net/tags/index/</loc>
  </url>
</urlset>
