Cybersecurity
The First 72 Hours After a Breach
The first three days decide the bill and the recovery. Most of the damage I see in small-company incidents is self-inflicted: wiped machines, missing logs, late notice.
Topic 01
Cybersecurity
Threats, incident response, and the controls that hold up when the budget is real.
6 pieces
Cybersecurity
Five Security Trends That Should Change Your 2026 Budget
Trend lists are free. Budget lines are not. These five shifts change what a small company should buy this year, and one of them is a reduction in spend.
Cybersecurity
The Threat Floor: What Security Actually Costs a Small Business
Small-business security is not a procurement problem. It is a floor of six controls, and most breaches walk in through the gap where nobody funded them.
Cybersecurity
What IBM’s Breach Report Gets Right — and What It Hides
The headline average is a marketing number, not a planning tool. Read the methodology, then build the model your own business can actually defend.
Cybersecurity
What the Iran Conflict Changes for a US Threat Model
State-aligned actors change the tempo and the target list. They do not change the fundamentals: exposed systems, weak identities, unpatched edge devices.
Cybersecurity
A Practical Map of US Data Privacy Law
There is no switch labelled compliance. Obligations arrive by data type, by state, and by sector, and the clock starts the moment you learn of a breach.