Briefs build your expertise one seam at a time. The blog is where a named writer takes a position on the systems underneath: what has to keep working when the network, the clock or the cloud does not.
Blog
Signed positions on the systems crisis and security work depends on: identity, backups, time, degraded operations and the fallbacks nobody rehearses.
Build your next move
20 starting points-
Identity Is the Foundation of Everything Else
-
When a Large Part of Your Operations Is at the Edge
-
Why Two Workstations May Sometimes Be Appropriate
-
Digital Evidence Has to Survive Cross-Examination
-
RPO and RTO Mean Something Different When It Is Mission-Critical
-
Interoperability When the Other Agency's Systems Are Poor
-
Think in Degradation, Not Up or Down
-
The Clock Is Critical Infrastructure
-
Minimum Viable Command
-
A Foothold Is Not an Attack. It Is an Option.
-
Why Some Mission Systems May Reasonably Stay in Service
-
Data That Carries Its Own Rules
-
What Has to Work When the WAN Is Down and GPS Is Gone
-
Why the Traffic Inside Your Cloud Subnet Is Plain HTTP, and Why That Can Be Fine
-
What If Your Cloud Is Breached?
-
Why Maintaining Manual Fallback Procedures May Be Prudent
-
What the Padlock in the Browser Really Means
-
It Is Always DNS
-
Recovering When the Ransomware Also Hit the Backups
-
You Cannot Defend What You Have Not Inventoried