This page is a snapshot of the present: the themes currently taking up more space in my work, learning, and professional exploration.
So far I have been documenting how to prioritize better, design operable capabilities, structure incident response, think about RBVM with context, and use AI without delegating judgment. Several of those questions now have an initial published answer on this site.
That means my current focus is moving one level further.
Questions that interest me now
- how can we distinguish activity from a real reduction in exposure or risk, and what evidence makes that conclusion defensible?
- how can we design capabilities and architectures that can evolve without unnecessarily increasing complexity, dependency, and operating cost?
- which decisions should remain human when we introduce AI into cybersecurity operations and tools?
- how can technical and operational evidence be translated into information that helps leadership decide without losing important context?
These questions will change over time. The purpose of this page is to keep a living reference to my current professional focus, not to build a corporate roadmap.