Vertically Capable, Horizontally Dysfunctional: The Myths of Cyber Resilience
80% of what you will read about “cyber resilience” on LinkedIn today is nonsense. It will not make…
Hero
10 posts
Rule of Two: New Subject, Same Old Mistakes
You may have seen Meta’s “Rule of Two” floating around, as a mental model for agentic security. Don’t…
Who thinks their own job is BS?
What should you do if you think your own job is BS?
What we think “good” looks like in SecOps is actually part of the problem
Shrinking the gap between events and impacts is the wrong strategy.
Growth that Builds, Growth that Breaks
You've probably heard it said that "healthy things grow". That's not true. Cancer also grows. What we can say for sure is that alive (or dynamic) things grow; whether that growth is beneficial or destructive is a different question.
How Focusing on Strategy Perpetuates the Problem
Strategy is easy. Execution is where the wheels come off.
Cybersecurity is a System
China found out the hard way that no one escapes the interdependencies of complex systems. We make the same mistakes in cybersecurity today.
From the Recorded Future Podcast: A Conversation with CISO Jason Steer About Identity Security
From my conversation with Recorded Future, two short, essential videos about identity security: how we got here, why it matters, and why it's so hard to do well.
How to Build a Thriving Career in Cybersecurity (and beyond)…Without Burning Out
I've learned most of these lessons the hard way. Here's 6 key things to consider.
Honest Self-Reflection for Security Leaders, Post-Breach: 3 Important Questions to Ask Yourself
There's never just one reason why a breach occurs, but leaders have a unique responsibility because they own budget, strategy, and prioritisation. Here are 3 questions to consider carefully.