Writing

Writing

Long-form essays on resilience, architecture, and executive decision-making under stress, with the external publications and the two newsletters that sit alongside them.

Recommended reading

Start with these three, in order.

A short, intentional path into the core of this body of work.

01
The claim

Evidence of Resilience

Why continuity must now be demonstrated rather than assumed by boards, regulators, and executives.

02
The frame

Operational Resilience Is Becoming the Global Regulatory Baseline

How market failures exposed fragility, and how regulators are codifying resilience worldwide.

03
The mechanism

Incentives, Behavior, and the Architecture of Change

Why misaligned incentives quietly undermine resilience, and how leaders correct course.

The through-line

Boards are being asked for evidence that critical services hold, and a program can be mature on paper and still unable to produce it.

The essays approach that gap from different angles: architecture, incentives, identity, supervision, and the record itself.

Everything else

Everything else, newest first.

The rest of the essays, titles and dates only. New ones appear here on their own. Subscribe by RSS →

Forbes Technology Council

Written for the Forbes Technology Council, 2023 to 2026.

Five pieces on identity, cloud architecture, board governance, and CISO leadership. The arguments in them later converged into the Resilience Operating Discipline.

Why Resilience Is The New ComplianceForbes Technology Council, 16 January 2026
Why Identity Security Is Changing CybersecurityForbes Technology Council, 12 December 2025
Preparing The Future-Ready CISO For Business LeadershipForbes Technology Council, 28 June 2024
From Regulation To Resilience: The Role Of CybersecurityForbes Technology Council, 3 July 2023

Newsletters

Two, published on Substack and not mirrored here.

Becoming Cyber

Becoming Cyber runs in seasons rather than as a feed, on what it takes to become, and remain, a cybersecurity professional as agentic AI absorbs the entry tier of the career. For the person at the door, and the people who decide whether it opens. Becoming Cyber →

CyberFuture

CyberFuture covers the governance and board oversight of security: what boards and regulators are coming to expect of the function, and how accountability is actually allocated when something fails. Issues appear when something warrants interpretation. CyberFuture →

Colophon

I advise 7AI, which builds in this category. 7AI has no review over anything published here. Where a piece bears directly on the category, the disclosure appears in the piece. Full disclosures.