Practical security thinking for people who run companies
Plain-English articles, one-pagers you can share with your leadership team, and a monthly briefing that respects your time.
Latest
Your business deserves a cybersecurity advocate
Why your IT provider isn’t your security strategy, and how Target, TSMC, and Okta were all reached through smaller partners.
Read →The wire-fraud email that looks completely normal
How business email compromise gets past MFA, and the five guardrails that stop the money from leaving.
Read →What your cyber-insurance application is really asking
The questions behind the checkboxes, and why a wrong “yes” can come back to bite you after a claim.
Read →Share these with your team
One-page overviews built for owners, partners, and boards.
Cybersecurity Leadership for Law Firms
Confidentiality, outside-counsel guidelines, and wire-fraud defense on one page.
Fractional CISO Advisory Overview
What a fractional CISO does, how it differs from IT, and how we start.
Cyber Risk Scorecard
Twelve questions, five minutes, an instant score across six risk areas.
Got a security question?
Ask anything, from “Do we really need SOC 2?” to “Is this email a scam?” You’ll get a direct answer by email, and the best questions (anonymized) become future articles.