Security Posts

2025

• Defeat the Asymmetry. Apply Common Sense.
• The Danger of Blind Acceptance in LLM-Generated Solutions
• Security Reality: Your Preparation Matters
• The Ten Principles
• F3EAD + Adversarial Thinking for Strengthening Strategic Planning
• Security Brutalism (Updated)
• Questions To Consider For Advancing A Security Program
• Force Multiplying Security: A Playbook
• Compliance != Security

2024

• Security Minimalism, Part One: The Framework
• Security Is Fucked
• Force Multiplying Security: A Guide
• The Basics, Again
• Baseline Operating Model
• But First Coffee, I Mean The Basics...
• Force Multiplying Security
• The Principles Of Security 2.0
• Stable. Secure. Resilient.

2023

• On Vendor Security
• Threat Modeling
• The Risk Of AI

2022

• Forward Point Risk Process
• The 7 Questions
• Security Competencies

2021

• Communicating Risk
• Security Master Plan

2020

• Laws Of Security

2019

• Roadmap For A Security And Resiliency Program (Updated)

2018

• Security Operating Model (Updated)
• Security Program Philosophy (Updated)
• Why We Red Team
• Humans Are More Important Than Hardware (Updated)

2017

• The Principles Of Security (Updated)
• The Recipes Of Security (Updated)
• Testing Security (Updated)
• The Four Elements Of Red Teaming
• The Importance Of Resiliency

2016

• The Core
• The Art Of Adversarial Simulation (Updated)

2014

• Thoughts
• A Simple Self Red Teaming Assessment
• The 10th Man

2013

• Basic Security And Digital Situational Awareness
• Thinking Like An Adversary

2010

• Key Things To Have In Mind While Red Teaming (Updated)

2009

• On Red Teaming (Updated)

-EOF-