Editorial and Sourcing Policy

Our Independence

NHI Mgmt Group is an independent publisher and research organisation focused on non-human identity, identity security, cyber security and AI security. We decide what we publish. Commercial partners do not approve or change our editorial content, and our guides and breach analyses do not include paid placement.

How We Produce Content

Our content is researched and written with the help of AI tools, under the editorial direction of our founder, Lalit Choda, who sets our standards, topics and processes and reviews samples of our output. Not every item is individually reviewed by a person before publication.

Every guide is produced against a written brief: use primary sources, cite only sources that were actually read, check framework identifiers (such as MITRE ATT&CK and NIST control IDs) against official datasets, avoid copying, and stay vendor-neutral. Automated checks run on every page before publication, each page carries a version and change history, and selected pages receive an independent fact-check.

Sources, Credit and Links

We prefer primary sources: standards bodies, regulators, official legislation, vendor and project documentation, and the original research or incident report. We list the sources a page relies on and link to them. Where a page summarises or comments on another organisation’s work, we credit it by name and link to the original.

We do not republish other people’s content word for word. Short quotations, where used, are attributed.

Editorials Based on Third-Party Posts

Some of our articles and forum editorials are NHIMG analysis of a post published by a vendor, researcher or news outlet. These are labelled as based on that source, with the source’s name, title and date and a link to the original. The analysis, structure and conclusions are our own.

FAQ and Glossary Content

Our FAQ answers and glossary definitions are written by NHIMG in our own words to explain general concepts. They are not reproductions of any single source. Where a specific source materially informs an answer, we credit and link it.

Guides and Breach Analyses

Our guides are general information and include a short notice explaining their limits. Our breach analyses are based on public sources listed on each page, and details may change as investigations continue. We record the date an incident became public and update pages when material new information is published.

Threat Actors and Attribution

Threat actor profiles rely on government advisories, regulators and established security research. We state attribution as the source states it, we do not use leak-site material, and we do not name individuals. Allegations are not findings of guilt.

Attack Techniques and Testing Tools

Content about attack techniques and offensive tools is written for defenders and authorised testers. It explains techniques at the level used by public frameworks such as MITRE ATT&CK and focuses on detection, prevention and response. We do not publish exploit code, payloads or step-by-step attack instructions.

Partner Content

Some content is produced with technology vendors under our partner programme. Partner content is labelled, vendor-supplied views are attributed to the vendor, and partner links and calls to action are disclosed. Our independent guides and analyses are not sponsored.

Corrections and Updates

If you find an error, email [email protected] with the page address and the correction. We review reports promptly, correct the page where needed, and record the change in the page’s version history. We also refresh pages when laws, standards or products change.

Requests From Vendors and Authors

If you published content we have drawn on and you have a concern, for example about credit, linking or overlap with your own content, email [email protected]. We will review it and, where appropriate, add or correct credit and links, rewrite the affected text, or remove the item. Removed pages are taken out of our sitemap.

Contact

Questions about this policy: [email protected]. See also our Terms and Conditions and Privacy Policy.