The Canon, No. 1: The Colonel Who Never Wrote a Book.
The most quoted idea in security belongs to a dead fighter pilot, and almost everyone quoting him has it wrong. The part that’s skipped is the most important one and can decide if you win.
Archive
A collection of 37 issues
Featured
The Second Payroll
Every security tool you buy hires an unapproved employee—fractional headcount spent triaging findings, tuning rules, and fixing broken integrations. Stop paying the invisible second payroll. Run the Absorption Test across your stack and start buying software that absorbs work instead of emitting it.
The $9 Billion Houseguest
Four vendors. Eight weeks. $9B in capital funding the same motion: engineers inside your company learning your business. You get their speed; they get your operating knowledge. Don't give away the tour for free.
The Agent Did It
An alert fires at 2:14 AM. Customer records are enumerated across multiple apps in ninety seconds. The authenticated actor? A service principal. In 2026, autonomous AI agents have entered production, and traditional cybersecurity playbooks are running out of road. It is time to rewrite the rules.
Posture as Code
Enterprise AI policies are written for humans but read by no one. PostureOS changes this by turning compliance into code. It delivers a machine-readable specification that governs AI agent behavior, continuously enforcing your data security and engineering standards directly at the framework levels.
Latest
Architecting Day One: The Blueprint for M&A Integration of Infrastructure, Operations, and Cybersecurity
Go beyond the handshake. The real work of M&A happens before the deal closes. My inside account on the sign-to-close sprint, from realistic budgeting and risk assessments to charting a secure and stable Day 1 for a newly acquired company.
The CISO as a Value Creator: From Bottom-Line Defense to Top-Line Offense
The modern CISO is a strategic partner, not a cost center. They protect the bottom line by preventing costly disruptions and fuel top-line growth by enabling sales and secure innovation. A strong security posture builds trust, wins deals, and transforms the CISO into a key value creator.
Navigating People, Process, and Technology in the Age of AI. The Enduring Triangle. Part 3
Theory meets practice in this final part! I dissect an IT Service Desk overhaul that began "process-first," using a unique restaurant analogy. Discover how "People First" principles still guide success, even when the path seems different. Concluding insights for your own transformations.
Navigating People, Process, and Technology in the Age of AI. The Enduring Triangle. Part 2
With People, Process, Technology's foundation set, AI enters. Is it merely new tech, or a human augmentor redefining roles? Part 2 tackles AI's true place, its workforce impact, and the skills now vital. Explore AI's radical shift and how the "People First" principle adapts.
Navigating People, Process, and Technology in the Age of AI. The Enduring Triangle. Part 1
The People, Process, Technology (PPT) framework champions 'People First' for impactful change. Processes support human talent; Technology then enables both. This human-centric foundation is vital as we navigate our complex, AI-driven world, forming the baseline for deeper exploration. Part 1 of 3
AI, Unemployment, and the Corporate Shift to Public Burden
Anthropic CEO Dario Amodei warns that up to 20% of college-educated workers could be unemployed within just a few years. As companies reap the benefits of automation, the question is: who pays the price?
Sunsetting the CISO: Why My Goal is to Make My Role Obsolete
Should the CISO aim to become obsolete? I explore the evolution of the CISO from a security bottleneck to an enabler. By truly empowering teams and embedding security, the ultimate goal is a culture so strong, the traditional CISO role transforms into a testament to its success.