NIST sets the standards a lot of serious security programs are built on. These articles cover working with the NIST Cybersecurity Framework and 800-53 in practice, from someone who wrote a company’s policies and procedures against them.
ComplianceFour to five months of interviews, C-suite down, mapping every policy to a named role. The project revealed something no framework document warns you about: the CFO did not know what segregation of duties was, and once he understood it,…
CompliancePassing an audit and being secure are not the same thing; companies that treat compliance as a checklist get breached at the same rate as those that ignore it. Real protection comes from documentation that reflects how the business actually…
CISOCybersecurity experts know their field cold; most just cannot turn that knowledge into writing that builds authority or draws clients. The expertise is there, the communication is not, and that is the gap. Drawing on 20+ years in security operations…
ComplianceThe regulatory documents are the standards your security program has to satisfy, and most teams never realize they are working from a version that expired. Finding and reading the right ones is half the compliance battle. Here is how to…
CISOI wrote a company's security policies against NIST CSF and 800-53, and now I ghostwrite books for the leaders who do this work. Most policy documents fail for two reasons: nobody knows who owns each step, and nobody knows which…
Professional ghostwriting for executives, founders, coaches, and authors who want to get the book done right. 113+ books authored. 54+ ghostwritten for clients.
Ready to discuss your book?
BOOK YOUR PRIVATE CONSULTATIONNo pitch. No pressure.
Four short, practical guides on writing, publishing, and selling your book, plus the occasional note when there's something worth your time. No fluff, no daily inbox clutter. Drop your email and they're yours.
We use MailerLite to manage our list and send these emails. Your address is used only to send you what you signed up for. We will not sell it, share it, or use it for anything else, and you can unsubscribe anytime.
