-
What Good Security Documentation Looks Like
Create documentation that people actually use, with clear ownership, current details, and enough context to be helpful.
Latest Notes & Patches
ALL ARTICLES
-
What Good Security Documentation Looks Like
Read the post: What Good Security Documentation Looks LikeCreate documentation that people actually use, with clear ownership, current details, and enough context to be helpful.
-

Incident Response Drills That Work
Build incident response muscle memory with drills that are simple, realistic, and useful enough to repeat regularly.
-

AI Tools Need Guardrails
Explore practical ways to use AI tools responsibly while protecting data, permissions, and decision quality.
-

Cloud Misconfigurations to Watch
Spot common cloud security mistakes early with a focus on permissions, storage exposure, and configuration drift.
-

Access Reviews Made Simple
Make access reviews less painful with a repeatable process that improves accuracy, accountability, and least privilege.
Security Fundamentals, Practically
Clear, workable security basics for busy IT pros: patching, hardening, logging, backups, and the small habits that prevent big incidents. No hype, no fear—just patterns you can apply on Monday and refine over time.
Identity & Access, Explained
Notes on authentication, authorization, MFA, conditional access, and least privilege—plus the messy reality of service accounts and legacy apps. Expect trade-offs, diagrams in words, and lessons learned the hard way.
Operations, Risk, and Reality
How security holds up in production: triage, detection, response, and post-incident improvement, with a side of risk thinking and emerging tech. The goal is steadier systems, fewer surprises, and always one more patch.
Get the next post in your inbox
A low-noise newsletter with practical security notes, lessons learned, and tools worth keeping. Occasional humor, no hype, and never a sales pitch.
No spam. Unsubscribe anytime.
