Vertically Capable, Horizontally Dysfunctional: The Myths of Cyber Resilience
80% of what you will read about “cyber resilience” on LinkedIn today is nonsense. It will not make…
43 posts
Rule of Two: New Subject, Same Old Mistakes
You may have seen Meta’s “Rule of Two” floating around, as a mental model for agentic security. Don’t…
Who thinks their own job is BS?
What should you do if you think your own job is BS?
What we think “good” looks like in SecOps is actually part of the problem
Shrinking the gap between events and impacts is the wrong strategy.
The True Scope of Posture Management
What's the true scope of posture management? You'll know you're on the right path when the security org is more focused on Prevention Engineering than on Detection (and Response) Engineering.
Growth that Builds, Growth that Breaks
You've probably heard it said that "healthy things grow". That's not true. Cancer also grows. What we can say for sure is that alive (or dynamic) things grow; whether that growth is beneficial or destructive is a different question.
The Now-and-Not-Yet Tension in our Careers
Remember the medieval quarry worker’s creed: “We who cut mere stones must always be envisioning cathedrals.” You're both the quarry worker, and the stones. The question is, what are you building?
AI Risks: Net-New or Amplifier?
Track the risks. Just make sure that the risks are the actual risks, so that the problems you fix are the actual problems.
How Focusing on Strategy Perpetuates the Problem
Strategy is easy. Execution is where the wheels come off.
Cybersecurity is a System
China found out the hard way that no one escapes the interdependencies of complex systems. We make the same mistakes in cybersecurity today.