Insights
Security leadership from the field.
Practical thinking on training, metrics, risk and organizational design — built from operating experience, not theory alone.
Security Operations
Security Is an Operating Capability, Not Just a Department
Why security performance depends on people, process, information, training and leadership working as one operating system.
Read article →Leadership
What I Look at in the First 30 Days of a Security Operation
Handoffs, exceptions, workarounds, supervisory decisions and visibility often reveal more than the policy manual.
Read article →Training
Why Training Fails When the System Doesn’t Reinforce It
Training works when expectations, supervision, workflow and measurement reinforce the behavior you actually need.
Read article →Operating thesis