This week, Jeppesen ForeFlight announced the appointment of Ron Wood as Chief Information Security Officer. On the surface, it seems a standard leadership move, one more CISO appointment in a sea of cybersecurity headlines. But beneath that headline, I see…
For decades, cybersecurity was framed as a technical discipline. Firewalls, patching, access controls, incident response. Important, but largely operational. That perspective no longer reflects reality, especially for financial institutions with long-term obligations to their clients and beneficiaries. Today, cybersecurity is…
The Power of Habit… Every lasting culture, whether in society, sports, or cybersecurity, starts with habit. The first steps are always the hardest: configuring a new tool, learning a process, setting up a secure baseline. But with repetition and consistency,…
Why the modern CISO must think like a strategist, not just a technologist In many organizations, cybersecurity is still viewed as a roadblock, the team that says “no,” slows down deployments, and overcomplicates the simple. But in a world where…
In the traditional enterprise structure, Information Technology (IT), the Security Operations Center (SOC), and the Network Operations Center (NOC) have each operated in their own distinct silos. The responsibilities have been clearly divided: IT handles infrastructure, patching, user onboarding, and…
“They May Not Remember What You Said, But They’ll Remember How You Made Them Feel” In business, we spend a great deal of time refining what we say. We write emails, craft pitches, rehearse presentations, and even debate the best…
In today’s digital-first economy, cybersecurity is no longer a back-office concern. It’s a front-and-center business risk, and one that should be on every boardroom agenda. Yet in too many organizations, security is still seen as a technical function, delegated to…
The Orphaned Infrastructure Epidemic It starts innocently enough. A VM spun up for a quick project. A physical server tucked away for testing. A service account or admin credential shared for the sake of convenience. Months go by. The owner…
I recently read a powerful and thought-provoking post by a respected colleague of mine, Irfan Ahmed , titled “The End of the Tech World… When Everything Became an Agent.” It was more than a commentary on AI, it was a…
Let’s be honest: most corporate security awareness programs are about as exciting and effective as watching paint dry. They check the compliance box, deliver bland PowerPoints, and then vanish until next year. Meanwhile, attackers keep evolving, users keep clicking, and…