Insights
Thought leadership themes anchored in executive cybersecurity leadership, resilience, and real incident response experience.
Articles
An Autonomous SOC Can Make a Provider More Profitable. Whether It Catches More Is a Separate Question.
Every AI SOC pitch leads with a margin story. Ask for the detection story next — nobody is volunteering it.
Nobody Fires Their MSSP on a Quiet Week. They Fire You the Morning They Heard It From Someone Else.
Retention in managed security isn't won in the quarterly review. It's decided at 4 a.m., on the one night the client finds out whether "we've got you covered" was ever true.
What Makes a Great MSSP?
Every provider can recite the same checklist. The distance between good and great now gets measured in seconds, not features — and it only shows up on the worst week of the year.
The MDR Market in 2026: A Practitioner's Reality Check
Over 60 vendors will tell you, with a straight face, that they offer 24/7 expert-led MDR. Some actually do. Many don't. Here's what I wish someone had told me before I started evaluating.
Most MSSPs Pass the Demo. Far Fewer Pass an Actual Incident.
What you are buying from an MSSP is a promise. The demo goes well, the early reports read reasonably — then something real happens, and you find out which of the promises were operational and which were marketing.
Core Themes
- The Cyber Resilience Leadership Framework
- What 600+ incident response engagements teach leaders
- The executive role in cybersecurity
- Incident preparedness as a leadership discipline
- Security leadership in the AI era
Featured Concept
The Cyber Resilience Leadership Playbook is a signature thought leadership platform built around lessons from 600+ incident response engagements.