About MajorCyber™MajorCyber™

What is MajorCyber™?

MajorCyber™ is an independent knowledge platform for cybersecurity, AI governance and privacy. It explains the standards, laws and programmes that shape security work, including ISO/IEC 27001, SOC 2, FedRAMP, HIPAA, PCI DSS, ISO/IEC 42001, the EU AI Act, GDPR and India’s DPDP Act. It sets out what each one requires, who it applies to and how the pieces fit together.

The platform is organised around six practice areas: governance, risk and compliance; security awareness training; penetration testing; phishing simulation; threat intelligence; and security operations. These are the disciplines that turn a framework on paper into security that holds up in practice.

About the founder

Major Shubham Sharma, Sam to most people, founded MajorCyber™. He is a former Major in the Indian Army, where he served for 12 years across counter-insurgency operations, field deployments and peacetime establishments.

He has 13 years’ experience in IT, information security and communications. He began his career as an SAP ABAP developer before joining the Army, where his roles took him from threat intelligence and analytics to cybersecurity and infrastructure risk, and on to technology risk and security governance. In his last assignment he headed a Tier III data centre and its 24x7 security operations centre (SOC). There he led security governance, audits and risk management aligned with ISO/IEC 27001 and the NIST Cybersecurity Framework, introduced AI governance aligned with ISO/IEC 42001, and oversaw incident response, business continuity and disaster recovery. He received the Army Commander’s Commendation Card for his work in cybersecurity and technology risk leadership.

Today he works in cybersecurity governance, risk and compliance, and mentors around 30 professionals preparing for the CISSP, CCSP, AAISM, ISO/IEC 27001 and ISO/IEC 42001.

His certifications, with badges and verification links, are listed further down this page.

Education

• M.Tech. in Information and Communication Technology
• B.Tech. in Electronics and Communication Engineering

Why MajorCyber™?

Security and compliance requirements are multiplying faster than most teams can read them. Much of the information available is either written to sell a service or too thin to act on. MajorCyber™ aims to be the reference Sam wished he had when leading audits, risk programmes and incident response: precise about what is mandatory and what is optional, honest about what is uncertain, and always linked to the official source.

How is the content made?

Every Academy guide follows the same structure, so frameworks can be compared like with like. Pages are researched from official sources first: regulators, standards bodies and programme owners. Each page lists its references and its last-reviewed date. Some research and drafting uses AI assistance. That is disclosed on each page, and nothing is published until it has passed editorial review. The editorial policy explains the process in full.

Independence

MajorCyber™ is an independent, personal educational project. It is not affiliated with, endorsed by or accredited by ISO, the AICPA, ISC2, ISACA, BSI, EC-Council, the PCI Security Standards Council or any regulator. It does not issue certifications, audit reports or attestations. Views expressed are Sam’s own and do not represent any current or former employer.