The incident report is the single most truthful document a security program ever produces about itself. A Sunday letter on why boards must read at least one a year.

M&A cyber diligence is the discipline that decides whether a strategic acquisition creates value or destroys it. A field guide to evidence-based diligence in 2026.

A serious executive tabletop is one of the highest-leverage investments a security program can make in 2026, and it bears almost no resemblance to the half-day theater most companies have settled for.