On security leadership, AI and culture

Notes from 23+ years of building security programs, on what it takes to run security as a business function.

  1. Speaking Tech Is Your Job. Speaking Executive Is Your Superpower.

    Why the burden of translation falls on technical and security leaders, and how to frame risk for each executive in the room.

  2. From Adoption to Accountability: Why AI Governance Starts with Learning

    GenAI is being implemented faster than it’s understood. Guardrails matter, but learning and development is the missing link.

  3. From Compliance to Culture: The Leadership Shift Cybersecurity Needs

    Breaches rarely stem from missing policy. Security leaders have to become culture architects.