Imane Errayes is an independent security researcher working on critical infrastructure security, with six years of operational experience across healthcare and election technology. Her research examines the gap between established cybersecurity frameworks and the operational realities of the organizations expected to implement them, which are often county election offices, small healthcare providers, and civic technology startups without dedicated security staff.

She has published five working papers on SSRN covering AI-driven threats to democratic elections, non-human identity governance in election infrastructure, and the gap between the NIST post-quantum cryptographic standards and VVSG 2.0 certification requirements. Her most recent work introduces a capacity-adjusted allocation instrument for sub-federal post-quantum migration, built on original vendor concentration analysis across 347 jurisdictions.

Her operational background includes building a security detection and compliance program from the ground up at a public health infrastructure provider, where she architected an ELK Stack SIEM centralizing Microsoft 365 and AWS CloudTrail logs, developed correlation rules for unauthorized access and exfiltration indicators, and led a HIPAA technical audit mapped to NIST SP 800-66r2 and SP 800-53 Rev. 5. Earlier she spent three years supporting security and compliance for an election administration platform serving jurisdictions in more than 30 U.S. counties, leading SOC 2 Type II certification, System Security Plan development under NIST SP 800-53, and compliance with the Michigan Security Accreditation Process.

She holds a plethora of security certifications with an MA in International Relations, Diplomacy and International Security from Norwich University. She writes the weekly briefing Imanologya, and works in English, French, and Arabic.