Curriculum Dashboard
Continuous controls monitoring pointed at the curriculum itself: each module's
review_due is treated like a control — reviewed within
cadence, due within 30 days, or overdue. As of 2026-10-12.
v1 boundary: this is a static site, so there is no cross-learner
cohort telemetry — your progress below is stored only in your browser. Aggregated per-objective
pass-rates (the curriculum's Loop-3 telemetry) need the deferred backend.
Your progress0/26 done · 0%
0 complete/placed-out · 0 in progress · stored only in this browser (no account, no server).
22 green 0 amber 4 red · 26 modules
| State | Module | Owner | Vol | Status | Review due | Δ |
|---|---|---|---|---|---|---|
| 00 What GRC Engineering Is | Justin Pagano | A | draft | 2027-05-28 | ok 228d | |
| 01 Terminal & Command Line Basics | Justin Pagano | A | published | 2027-05-28 | ok 228d | |
| 02 Linux System Fundamentals | Justin Pagano | A | draft | 2027-05-28 | ok 228d | |
| 03 macOS Fundamentals | Justin Pagano | B | draft | 2026-11-28 | ok 47d | |
| 04 Windows Fundamentals | Justin Pagano | B | draft | 2026-11-28 | ok 47d | |
| 05 Programming & Git | Justin Pagano | A | draft | 2027-05-28 | ok 228d | |
| 06 API Fundamentals | Justin Pagano | B | draft | 2026-11-28 | ok 47d | |
| 07 Data & Cloud Control Plane | Justin Pagano | B | draft | 2026-11-28 | ok 47d | |
| 08 Infrastructure as Code & Scanning in CI | Justin Pagano | C | draft | 2026-08-28 | overdue 45d | |
| 09 Policy as Code | Justin Pagano | C | draft | 2026-08-28 | overdue 45d | |
| 10 The Standards Spine | Justin Pagano | B | draft | 2026-11-28 | ok 47d | |
| 11 Threat-informed GRC & Systems/Design Thinking | Justin Pagano | B | draft | 2026-11-28 | ok 47d | |
| 12 OSCAL & Compliance-as-Code | Justin Pagano | C | draft | 2026-08-28 | overdue 45d | |
| 13 Continuous Controls Monitoring | Justin Pagano | A | draft | 2027-05-28 | ok 228d | |
| 14 Product Ownership & Build-vs-Buy | Justin Pagano | B | draft | 2026-11-28 | ok 47d | |
| 15 Capstone: Ship One Control, Fully Engineered | Justin Pagano | A | draft | 2027-05-28 | ok 228d | |
| 16 On the Wire: Where a Control's Truth Travels | Justin Pagano | B | draft | 2026-12-13 | ok 62d | |
| 17 Same Question, Three Stores: Where Control-Truth Lives at Rest | Justin Pagano | B | draft | 2026-12-13 | ok 62d | |
| 18 Where the Claim Can Be True: Tracing a Request Through the Tiers | Justin Pagano | B | draft | 2026-12-13 | ok 62d | |
| 19 Four Counters, One Question: REST / SOAP / GraphQL / gRPC and Where the Control Lives | Justin Pagano | B | draft | 2026-12-13 | ok 62d | |
| 20 Whose Control Is It? Reading the Responsibility Boundary | Justin Pagano | C | draft | 2026-09-13 | overdue 29d | |
| 21 Peel the Image: Where a Workload's Control-Truth Is Baked In | Justin Pagano | B | draft | 2026-12-13 | ok 62d | |
| 22 The Padlock Is a Lie (Until You Read the Cert) | Justin Pagano | B | draft | 2026-12-13 | ok 62d | |
| 23 The Valet Key: Reading Who You Are and What You May Do | Justin Pagano | B | draft | 2026-12-13 | ok 62d | |
| 24 From a URL in a Box to a Chain of Trust: Reading the Request Lifecycle on the Wire | Justin Pagano | B | draft | 2026-12-13 | ok 62d | |
| 25 The Field That Proves It: Reading a Log Line as Continuous Evidence | Justin Pagano | B | draft | 2026-12-13 | ok 62d |
An overdue module is treated exactly like an overdue control — visible, owned, escalated. If the team can't keep their own training green, that's a live lesson in why controls rot.