Essay
The quiet cost of unclear decisions
Why most breaches are not technical failures but decision failures — and how to design an organisation that decides well.
Written slowly, on purpose — long-form where it matters, brief where it does not.
Why most breaches are not technical failures but decision failures — and how to design an organisation that decides well.
Governance without theatre. What actually matters when boards start asking about AI, and how to answer them honestly.
The lessons that survived the frameworks, the vendors and the acronyms — and the ones I had to unlearn.
What 'good security posture' actually looks like when you strip away the dashboards and the compliance scaffolding.
A short piece on the craft of composure in incident response — and why it is a leadership skill, not a temperament.
AI is showing us how we think. What are we going to do with what we see?