Blog
JNL / 00
Notes on leadership, risk, and execution.
Working notes from the practice — written for executives and security leaders navigating the decisions cybersecurity actually turns on.
- LeadershipApril 22, 2025
The quiet cost of reactive security programs
Most programs fail not from missing tools but from missing priorities. A short note on what reactive looks like — and what to do about it.
4 min read - GovernanceMarch 18, 2025
What boards should actually ask about cybersecurity
A short list of questions that produce real answers — and the ones that don't.
5 min read - Incident ResponseFebruary 4, 2025
Tabletops that actually work
Most tabletop exercises produce a report. Good ones produce changes.
6 min read
Looking to discuss something specific?
Notes are intentionally short. For a working conversation about your situation, an advisory call is the right next step.