Cybersecurity Resource Center

The Cybersecurity Hub

Real security isn’t the tools, the dashboards or the audit checkboxes. It’s the boring work nobody wants to do and the human layer everybody forgets. These articles come from decades inside security operations.

BOOK YOUR PRIVATE CONSULTATION BOOK DISCOVERY INTENSIVE

No pitch. No pressure.

TL;DR: Real security comes down to the boring work and the human layer, not the tools or the audit checkboxes. These articles come from decades inside security operations and are written for security leaders and anyone responsible for protecting a business. The chapters cover what security leaders do, where security breaks, thirteen attacks with one lesson, breaches and incident response, audits and insiders, defense and training, home preparedness, and writing the security book.

This hub is laid out in chapters, from what security leaders do to where security breaks, the attacks that proved it, and what to do about it. If you’re a security leader with a book in you, see my ghostwriting services or start smaller with the Book Discovery Intensive.

The Cybersecurity Hub’s eight chapters at a glance
Chapter	What it covers
1. What security leaders do	The security leader role, policy that names names, documenting the standards that apply
2. Where security breaks	The human layer, security tool theater, the supply chain, scams
3. Nothing is isolated	Thirteen attacks, from the Morris Worm to the XZ backdoor, and what they say about AI
4. Breaches and incident response	First-hand breaches, ransomware, recurring infections and scams spotted early
5. Audits, compliance and insiders	Eight PCI audits, checkbox security, NIST role documentation, insider password cracking
6. Defense, deception and training	Layered defense, in-person social engineering, training that works, WordPress posture
7. Preparedness and home defense	Hurricanes Helene and Milton, social media audits, phone and family security
8. Writing the security book	What executives get wrong, security ghostwriting, whether a book helps attackers

Chapters

What security leaders do (4)
Where security breaks (10)
Nothing is isolated: thirteen attacks, one lesson (14)
Breaches and incident response (13)
Audits, compliance and insiders (6)
Defense, deception and training (4)
Preparedness and home defense (9)
Writing the security book (8)

1. What security leaders do

↑ Back to chapters

2. Where security breaks

↑ Back to chapters

3. Nothing is isolated: thirteen attacks, one lesson

↑ Back to chapters

4. Breaches and incident response

↑ Back to chapters

5. Audits, compliance and insiders

↑ Back to chapters

6. Defense, deception and training

↑ Back to chapters

7. Preparedness and home defense

↑ Back to chapters

8. Writing the security book

↑ Back to chapters

Thinking about a book of your own? Start with the Ghostwriting Hub. Related: Digital Transformation Hub, Disaster Recovery Hub, Technology of Writing Hub.

Frequently Asked Questions

What is the weakest link in cybersecurity?

The human layer. Firewalls and patches can all be solid, and a phishing email or a helpful employee still lets an attacker in.

Are security audits the same as being secure?

No. An audit proves you met a standard on the day it was checked. Security is the unglamorous work that keeps happening between audits.

Will publishing a cybersecurity book help attackers?

No. Attackers already have the techniques. A good security book sells the author’s judgment and experience, and an attacker can’t use either one.

What experience does Richard Lowe have in security?

Thirty-three years in enterprise IT, including 20 years as Director of Computer Operations and Technical Services at Trader Joe’s, with responsibility for PCI audits, disaster recovery and security operations.

Are you a security leader sitting on a book?

You have decades of judgment that nobody else has written down. A book turns that into authority. Let’s talk about getting it out of your head and onto the page.

BOOK YOUR PRIVATE CONSULTATION
BOOK DISCOVERY INTENSIVE

No pitch. No pressure.

Categories and tags

CategoriesCybersecurity

TagsResearch Writing Craft

About the Author

Richard Lowe is a professional ghostwriter and author with 113+ books authored and 54+ ghostwritten. Before writing full time he spent 33 years in enterprise technology, including 20 years as Director of Computer Operations and Technical Services at Trader Joe's. He writes nonfiction, fiction and memoir, and works with executives and experts on books that build authority.

More about Richard Lowe →

Disclaimer

The views and opinions expressed in this blog post are solely those of Richard Lowe and are based on personal experience and research. This content is for informational purposes only and should not be construed as professional legal, financial, accounting, or business advice. Always consult with qualified professionals before making important business or legal decisions. Richard Lowe is not a lawyer, accountant, or licensed professional advisor, and this content does not establish any professional relationship.

The Cybersecurity Hub

1. What security leaders do

2. Where security breaks

3. Nothing is isolated: thirteen attacks, one lesson

4. Breaches and incident response

5. Audits, compliance and insiders

6. Defense, deception and training

7. Preparedness and home defense

8. Writing the security book

Frequently Asked Questions

Are you a security leader sitting on a book?

Books & Reviews

Services

Resources

Get In Touch

Or follow Richard's work