The Cybersecurity Hub
Real security is not the tools, the dashboards, or the audit checkboxes. It is the boring work nobody wants to do and the human layer everybody forgets. These articles come from decades inside actual security operations, written for the leaders who have to make the calls.
No pitch. No pressure.
Security is the boring work nobody brags about.
The breaches that make headlines almost never come from clever attacks. They come from the easy part of the job nobody did. This hub covers what security leaders actually do, where defenses really break, and the unglamorous work that keeps you safe.
What security leaders actually do
The job is translation and judgment, not just tools and dashboards.
Where does security actually break?
The firewall is rarely the problem. The human layer almost always is.
Audits, compliance, and home defense
Passing an audit is not the same as being secure.
Breaches and incident response
Every one of these happened to systems I was responsible for, including my own.
Audits, compliance, and insiders
Eight years of PCI audits, a NIST engagement, and the threats that were already inside.
Defense, deception, and training
The layers that catch what judgment misses, and the training that actually changes behavior.
Preparedness and survival
- ► When Hurricane Helene Grazed Clearwater: A Lesson in Backup Plans
- ► Bracing for Hurricane Milton While Cleaning Up After Helene
- ► Preparing for a Category 5: My Hurricane Milton Experience and Advice
- ► Hurricane Milton Was Truly Frightening: The Aftermath
Write the security book
Turning security judgment into published authority.
Are you a security leader sitting on a book?
You have decades of judgment that nobody else has written down. A book turns that into authority. Let’s talk about getting it out of your head and onto the page.