A record of recent speaking engagements, and the future home for longer-form writing on security governance, leadership and strategy.
Longer-form writing on cyber security governance, leadership and culture, published externally while this page grows into its own home for new content.
Applying Michael Watkins' First 90 Days framework to CISO transitions — diagnosing whether you've inherited a start-up, turnaround, realignment or growth problem before choosing a playbook, and negotiating expectations with your boss up front rather than by accident.
Read on Medium →Why the most effective security controls are the ones users never notice, and why a circumvented control is worse than no control at all — illustrated by two decades of workarounds, from disk encryption codes on Post-it notes to shadow file-sharing over mobile data.
Read on Medium →Why a cyber incident is inevitable, and how peer networks, shared threat intel and layered defences build resilience. Co-written with Ambrose Neville (University of Surrey).
Read on Medium →Results from phishing our own IT department, and why fast response and a no-blame reporting culture matter more than click-rate metrics.
Read on Medium →Why the data on an executive's laptop is worth far more than the device, and why leaders must visibly follow the security guidance they expect from everyone else.
Read on Medium →A personal walkthrough of the desk, display, chair and video-call kit behind a well-equipped home office.
Read on Medium →Practical gaps between the Cyber Essentials requirements and the Evendine question set, and the BYOD scoping challenges facing UK higher education.
Read on Medium →A short, practical answer to a common question: read the standards, and follow them without second-guessing.
Read on Medium →Table discussion leader: "Resilient Leadership: Optimising Cybersecurity in a Dynamic World"
Panel member: "Fostering a Digital Native Mindset to Cybersecurity"
Guest Lecture: "Advanced Topics in Security (Cyber & Physical)"
Keynote panel: "AI in Cyber Security: The Benefits, Pitfalls, and Implications for the Future"
Presentation: "The Floor is Lava: Lessons from the Field" (reprised by request, Spring 2024)
This page will grow into a home for original articles and commentary on cyber security governance, CISO leadership and building security functions from the ground up, alongside the writing published on Medium above. Check back soon.