Archive

The Pricing Reckoning

AI is about to expose the structural flaws in how enterprise vendors price their products. Bandwidth, per-seat, and bundled metering all share the same fatal weakness. The vendors who don't move first will lose share. Here's the framework.

The Code Nobody Wrote and Nobody Can Review

The most dangerous code in your enterprise is the code you never knew was written. Vibe coding turns every employee into a developer, creating a compounding attack surface. PostureOS inverts the model: governing the AI’s input with security constraints before the first line is ever generated.

I Built an App Over the Weekend. I Can’t Write a Line of Swift.

I don’t know Swift. I’ve never opened Xcode with the intent to build something real. Last weekend, I built a fully functional iOS app in about six hours using AI. Not a toy. Not a demo... My role was architect, product manager, and QA. The AI was the entire engineering team. This one is real.

The Unbundling Cascade

The unbundling of Teams from M365 is the catalyst for a "Four-Vector Attack" on Microsoft’s enterprise moat. As Teams becomes a standalone line item, the door opens for hardware shifts to Mac, superior AI alternatives like Gemini or Claude, and local inference models that crush cloud token costs.

The Windows Fortress

While Apple’s MacBook Neo disrupts Microsoft’s licensing, the reality is that 60% of an enterprise’s workforce is structurally locked to Windows by critical, non-portable software dependencies, from SAP macros to industrial automation. The "Windows Fortress" remains.

Project Glasswing and the Cure the Cybersecurity Industry Doesn't Want

Anthropic’s Project Glasswing revealed a terrifying AI: it found thousands of zero-days in weeks, including a 27-year-old bug. We explore the disturbing economics of cybersecurity, the formation of a dangerous power concentration, and the strategic decisions CISOs now face.

The $599 Trojan Horse

The $599 MacBook Neo isn't a hardware play; it’s a licensing "Trojan Horse." By offering a cheap browser-first endpoint, Apple provides a credible exit from Microsoft’s $60/month E5 licensing gravity, giving procurement teams massive leverage to force lower M365 tiers and slash enterprise costs.

The Bottleneck of One: Why I'm Trying to Make Myself Redundant

The CISO role is trapped: by trying to secure everything, we’ve become a bottleneck for everyone. True resilience isn’t one highly defended castle; it’s an organization capable of self-defense. I’m trying to make myself redundant by embedding security into the company’s very DNA.

The CISO Is Not a Cost Center. Here’s the Math.

When a CISO tells the board "we prevented an estimated $4.9 million ransomware loss," the board hears "we spent money to avoid spending more money." The shift is moving from cost avoidance to value creation — and it requires a different vocabulary: margin, revenue acceleration, and differentiation.

After the Champagne: The 18-Month Integration Nobody Warns You About

The close simply marks the end of the beginning. The real integration—forging two digital ecosystems into one—will consume the next 18 months. It's not an IT project; it's a deep, structural business transformation, moving past the champagne into complex ERP work and application rationalization.

The M&A Integration Nobody Budgets For: Humans

Your integration dashboard might show green, but your adoption metrics will tell a different story. M&A playbooks easily cover technical integration, but often ignore the humans. Change management isn't a support function—it’s the critical enabler that stops passive disengagement in its tracks.

Dual Maintenance: The Ugliest Good Idea in Enterprise IT

Why can't we migrate everyone on Day 1 of an M&A integration? Because the business needs to operate immediately, but technology needs months. Discover why 'dual maintenance'—running both legacy and new systems—is the ugliest, yet most effective strategy for a secure, stable transition.

The 90 Days Nobody Talks About in M&A

The moment an M&A deal is signed, the real battle begins. While executives celebrate, IT and cybersecurity teams enter a high-stakes sprint. Operating in a legal gray zone, they must merge complex digital ecosystems without causing a breach. Success hinges on this secret 90-day window completely.

Why 2026 Plans Fail by February. Introducing Strategic Patience

Annual plans don’t die in Q4; they die in February when reality hits. This post introduces "Strategic Patience"—an executive playbook to survive budget whiplash. Learn to replace "January Optimism" with a 3-layer portfolio, assumption registers, and 90-day gates to bulletproof your 2026 execution.

The End of Awareness Training: Why You Need an AwarenessOS

Annual awareness training is obsolete. In an era of AI-driven threats, you don't need another program—you need an operating system for your people. This is the blueprint for AwarenessOS, a new framework for turning human risk into your greatest defensive asset.

The GenAI Divide: Beyond the 95% Failure Myth and the Workslop Epidemic

MIT revealed 95% of enterprises gain no ROI from GenAI—a headline that fuels skepticism but masks the deeper truth: the GenAI Divide. A small 5% capture massive value, while most drown in stalled pilots and workslop. Success hinges not on hype, but on governance and strategy.

A Playbook for Building an AI Governance Foundation

Don't just sprint into AI; build a foundation first. This playbook offers a 15-step roadmap to create an effective AI governance framework. Learn to mitigate risks, ensure compliance (like the EU AI Act), and transform AI from a potential liability into a powerful competitive asset.

Reclaiming the Hour: How We Used AI to Fight Administrative Bureaucracy and Put Mental Health Patients First

In my partner’s psychology practice, paperwork consumed precious hours meant for patients. Instead of costly, invasive AI tools, we built a private agent that transforms handwritten notes into progress reports—reclaiming time, protecting privacy, and putting patients first.

From the Server Room to the Strategy Table: How CISOs Can Maximize Their Impact at Top Management Gatherings

For CISOs invited to the leadership offsite, the opportunity is immense—and so is the risk of getting it wrong. This guide provides a playbook for shifting from a technical defender to a strategic business enabler, cementing your influence and embedding security into the core of business growth.

Architecting Day One: The Blueprint for M&A Integration of Infrastructure, Operations, and Cybersecurity

Go beyond the handshake. The real work of M&A happens before the deal closes. My inside account on the sign-to-close sprint, from realistic budgeting and risk assessments to charting a secure and stable Day 1 for a newly acquired company.