// MANIFESTO
Cyber Digital Bushido
Let your code be true and your actions provable.
The argument
Security is a practice of character before it is a checklist. The eight virtues of Bushido — an ethical code, read honestly, with its seams shown — give that character a vocabulary: eight commitments, each resolving to controls a practitioner already answers to. This site makes the argument, maps it to NIST CSF 2.0 and ISO 27001:2022, and hands you a mirror.
The eight virtues
- 義01 / 08
Gi
Integrity / rectitude
Let your code be true and your actions provable.
Domain: Non-repudiation and ethical conduct
- 勇02 / 08
Yū
Courage
Do not wait for the arrow. Go and find the archer.
Domain: Threat hunting and incident response
- 仁03 / 08
Jin
Benevolence
Wield the power to restrict as a duty to protect.
Domain: Usable security and human-centred design
- 礼04 / 08
Rei
Respect
Grant only what duty demands. Surplus privilege invites disorder.
Domain: Least privilege and access control
- 誠05 / 08
Makoto
Sincerity
Report what is, not what is comfortable.
Domain: Data integrity and truthful reporting
- 名誉06 / 08
Meiyo
Honour
Your auditor is not watching. Do it correctly anyway.
Domain: Accountability, governance, audit
- 忠義07 / 08
Chūgi
Loyalty
Guard the clan you belong to, and be worth guarding.
Domain: Security culture and insider risk
- 自制08 / 08
Jisei
Self-control
Every change deliberate. Every deployment reversible.
Domain: Change and configuration management
Security controls define what an organisation can enforce. Character defines what people do when the control does not cover the situation.