Book Reaction: Countdown to Zero Day
What lessons are still valuable 15 after the world's first cyber "missile", at a time when the United States is in a kinetic fight with Iran over the very same nuclear program that cyber missile was fired at?
Preserve Operational Excellence; Prevent Operational Drift
Complacency in cybersecurity allows for a “normalization of deviance.” Operational excellence asks us to build habits. Normalization of deviance is what happens when those habits decay without anyone noticing, or simply accepted because surfacing it would be inconvenient.
My Take on AI Governance: Balancing Risk with Opportunity
To AI effectively, you cannot not run away from AI and bury your head in the sand, but you also should not adopt it blindly, or through arbitrary top-down mandates, without understanding the risk and implementing relevant oversight.
Before You Buy Another Security Tool: Fix Governance and Process
Cybersecurity leaders focus first on governance and risk identification, then on tool-agnostic and repeatable processes, and then on implementing tooling.
Cyber Leader's Blueprint 5 - Build Strategic Influence: Everything Else that Matters
The effective cybersecurity leader builds their flywheel of success through continuous development of professional habits. This means knowing the business, staying in the know, and building your brand and your network.
Cyber Leader's Blueprint 4 - From Operational Excellence to Servant Leadership: Architecting Impact in Cybersecurity
Servant leadership, prioritizing the growth, well-being, and needs of team members over personal agenda, helps the cybersecurity leader scale their own technical expertise and operational excellence.
Cyber Leader's Blueprint 3 - Turbocharge Technical Acumen through Operational Excellence
Operational Excellence encompasses the skillsets that expand your capacity to work and communicate effectively with peers and stakeholders.
Cyber Leader's Blueprint 2 -Beyond the Console: Building Foundational Technical Acumen for Cyber Leaders
Regardless of your track in cybersecurity, some level of technical expertise is required. This isn't about becoming a hacker or an NSA analyst. Technical expertise means cultivating a foundational understanding of underlying technologies, their functions, and the associated risks and threats.
The Cybersecurity Leader's Blueprint: Bridging Technical Depth with Strategic Vision
The journey to cyber leadership demands far more than just technical prowess. Technical expertise is non‑negotiable, but its true power is unlocked when built on a foundation of operational excellence, servant leadership, business acumen, risk management, and human understanding.