Blog

Writing on compliance and security work — in practice.

Notes on the operational side of cybersecurity advisory. What we've learned, what we think is worth saying, and the occasional opinion.