Writing & analysis
This is where I explain cybersecurity governance, program design, human risk, and AI governance in a way that respects both the complexity of the subject and the reader’s time.
A practical modernization argument built around GRC, human-centered training, executive risk communication, responsible AI integration, and continuous reevaluation.
Research directions
These are active professional interests—not empty article slots. New pieces will appear only when the research and argument are ready.
How organizations can distinguish responsible oversight from policy language that creates no usable decision process.
Why blaming the user obscures the organizational conditions that allow ordinary mistakes to become serious incidents.
What communication, ownership, evidence preservation, and rehearsal reveal about whether a response program can actually operate.
Writing standard
My goal is not to produce more cybersecurity content. It is to produce clearer professional judgment.