Sector
Security
Most attacks begin with a person: a click, a credential, a moment of inattention.
5essays
1pattern
The same failures, wherever you look
One pattern runs through security. It isn’t unique to it.
Built to be defensible, not to help
5 of its 8 essays are in security.
Institutional response systems for fraud, breach and cybersecurity are built to produce a record that the institution acted, not to close the exposure or protect the person living inside it.
Read
Start with the evidence.
Five essays
Built to be defensible, not to help
- The company that knew and said nothingBreach disclosure designed to serve the institution managing it, not the person whose data was taken.
- It can be managedGovernance built to document exposure, not close it.
- Crime with a support deskCriminal support infrastructure built to reduce friction better than legitimate response systems.
- Nobody Decided This Was AcceptableStuxnet and the absence of updated international frameworks.
- They Already Have ItHarvest-now-decrypt-later, active while migration hasn’t started.
One book
Use
How to Protect YourselfFor when you already know the threats exist and still don’t know where to start.
How to Build Your Digital FortressFor when the passwords are set, the 2FA is on, and the risk hasn’t actually gone away.
Fortify the EnterpriseFor when the human element is your strongest layer of defence, not your weakest.
Something to do about it.
How to Protect YourselfFor when you already know the threats exist and still don’t know where to start.How to Build Your Digital FortressFor when the passwords are set, the 2FA is on, and the risk hasn’t actually gone away.Fortify the EnterpriseFor when the human element is your strongest layer of defence, not your weakest.
Work with me
Done before, in security.
- CISOand CSO: security posture across engagements, and regulatory audits across outsourced businesses.Outsourcing and consulting
- ResearchIP protected at a UK university: new security stack, awareness training, full vulnerability remediation.Higher education
- 99.9999%availability across global sites, on secure infrastructure with recovery plans tested for real.Defence manufacturing