For consultants — Security Observatory BlogComparisons, frameworks and public data for client work, with sources and assumptions stated so you can reuse them with care.