karim romani

Now: an ISO 27001 lab

I'm studying ISO 27001 by applying it to a fictional organisation. So far that means reconciling source notes and structuring the questions I'd put to stakeholders.

Facts stay marked as proposed until they've been reviewed, and only approved facts go into the register the rest of the lab builds on.

Lab 1 is in progress. The first write-up will come out of it.

Playlist mixer

I host salsa and bachata parties, and I wanted the music split by time on the dance floor. The mixer gives each genre a share of the listening time, with songs in runs: bachata in pairs, salsa in ones or twos.

This autumn I corrected and tested the mixing logic and rebuilt the interface as a hardware-style console.

Simulated tracks between 3:00 and 4:30. Preset and code in the public repository. There is a live app, but Spotify only lets accounts on its allowlist sign in.

WoW addons and companion

A set of World of Warcraft addons and a companion app for inventory, market analysis, crafting and warehousing. The companion scans auction data across 81 EU realms and ranks them. Changes to that ranking are tested on realms held out of the fit, and most have been rejected.

A sister set does the same job for Forever. There every item is followed to its sale, so projected gold per hour can be checked against what it really earned. A graph will be added when it launches.

I define the operating logic: which tool owns each action, and when incomplete data should stop an automated step.

26.89M g

My gold over the first 30 days after the Midnight launch. Pick a column to read a day.

Tabletop adaptations

Digital versions of tabletop games we own, played at home over the local network. Everyone joins from their phone by QR code; a TV can show the board but isn't needed.

There are two games so far. Both run through Tabletop Nexus, a portal I built that starts one game at a time behind a single address. The portal is public; the games stay private because the rules and art aren't mine to share.

After family playtests I reworked the animations and icons so moves were easier to follow.

Homelab

A small Proxmox host. OPNsense is the firewall and router, so everything from outside passes through it, and AdGuard filters DNS. A Debian VM runs Docker for my own services, like a panel that runs the bedroom AC on a schedule.

I'm reworking it, on paper first, with an inventory, a network map and a change log: separate network segments, alerting, intrusion detection, and a message bus the services share.

Dashed boxes are planned. Pick a box for what it does.

Background

I've worked at Teleperformance on several client programmes. In support, across SaaS, banking and gaming, I followed verification and privacy procedures, documented decisions and escalated cases beyond my authority.

In content review I applied intellectual-property policies and researched ambiguous cases. In AI evaluation I compared summaries against their source text and scored accuracy, readability, tone and localisation.

I completed the Google Cybersecurity certificate in May 2026 and I'm preparing for CompTIA Security+.

Client names stay confidential. Full history on LinkedIn.