writing

Notes from the work, not the hype cycle.

Short, opinionated posts. Mostly LinkedIn for now. Longer pieces will land here as they’re ready.

Featured posts

Infosec Europe: defending the inbox in the age of intelligent threats

What ‘winning’ looks like when attackers automate and you still need measurable controls.

AI in cyber: friend or foe?

A practical framing for AI risk, controls, governance, and where the hype dies.

Coming soon

Board-useful explainers

I’m building a set of practical pieces: AI governance, assurance at speed, and operating models that survive growth. No filler.