Insights & Articles
Real-world cybersecurity topics — written clearly, without the jargon.
I posted about breaking into cybersecurity and 125,336 people saw it. That part surprised me. What surprised me more was what happened in the comments. I expected encouragement. I got…
Continue Reading
Your AI flagged the threat. Your analyst escalated it. Nobody in the room can tell you why it was suspicious. You think that’s a win. I’m telling you it’s a…
Continue Reading
If your threat intel program can't name your top threat actors, you're paying for data, not intelligence. Here's what a real program looks like.
Continue Reading
Every time I talk with a new client, I ask the same question: do you have a security framework guiding your program? About half of them say yes. Then I…
Continue Reading
Your last access review came back 90% approved. That’s not a clean environment. That’s a broken process with a completion date stamped on it. I’ve spent thirty years watching identity…
Continue Reading
Here's a question I ask in almost every new security discussion: What's your biggest risk right now? You'd be surprised how many people can't answer it. Not because they don't…
Continue Reading
Let me tell you what most organizations do when they decide they need a security policy. They Google a template. They copy it. They put it in a shared drive.…
Continue Reading
Let me tell you the most common mistake people make when trying to break into cybersecurity. They start with the wrong thing. They buy a cert prep book before they understand…
Continue Reading
What’s the point of an information security program? The simple answer is to protect all the data from being stolen, misused or compromised. Most business units, when talking about info…
Continue Reading
Stop me if you’ve heard this before – INFORMATION SECURITY IS NOT SOLELY THE RESPONSIBILITY OF THE IT DEPARTMENT. Thanks, I had to get that off my chest. But it’s…
Continue ReadingOnline courses that cover these topics with the depth and clarity you need to actually apply them.