Site

How this site handles security, privacy, and contact.

Security posture

The site is static and privacy-first. I minimize data exposure in anything I publish and avoid sharing sensitive details.

Least privilegeAudit trails

Data handling

No cookies by default. No third-party tracking scripts. If I ever add forms, they’ll be minimal-data and explicit.

Data minimizationRetention

Working in regulated environments

Controls, evidence, and workflows are implemented with defensibility in mind—so audit and oversight functions can rely on outputs.

DefensibleRepeatable

Vulnerability disclosure

Security contact is published via /.well-known/security.txt.

DisclosureResponse

Contact

Say hello

Best channel is email. No mailing lists. No tracking.

grcguy@rtapulse.com • LinkedIn

Personal site. Views are my own.

What ऋतPulse means

rtapulse.com (ऋतPulse) combines ऋत (ṛta / ṛtá)—order, rule, truth, rightness—with Pulse (a living signal of health). It reflects how I think GRC should work: not a quarterly scramble, but a steady rhythm—detect drift early, keep evidence ready, and translate risk into decisions leaders can act on.