Journal

Essays, reflections and ideas.

Written slowly, on purpose — long-form where it matters, brief where it does not.

Essay

The quiet cost of unclear decisions

Why most breaches are not technical failures but decision failures — and how to design an organisation that decides well.

Note

A calmer definition of AI governance

Governance without theatre. What actually matters when boards start asking about AI, and how to answer them honestly.

Reflection

What twenty years in security taught me

The lessons that survived the frameworks, the vendors and the acronyms — and the ones I had to unlearn.

Essay

Security posture, translated

What 'good security posture' actually looks like when you strip away the dashboards and the compliance scaffolding.

Note

On being the calmest person in the room

A short piece on the craft of composure in incident response — and why it is a leadership skill, not a temperament.

Reflection

The mirror the machines hold up

AI is showing us how we think. What are we going to do with what we see?