Notes from inside the work.
Specific problems, described in enough detail to be useful. Mostly compliance, cloud architecture, and the places where the two collide.
How attackers actually get in
Nobody is port-scanning your laptop. Intrusions come through what you expose, the credentials your people type, and what they download — three doors. Why your remediation queue should be sorted around them before it is sorted by severity.
2 November 2026 · 7 min read BYOD · Small businessThe smallest BYOD policy that survives an audit
A fifteen-person company does not need mobile device management to pass a SOC 2 audit. Six things proven with screenshots, a signed policy that says what the company can and cannot see, and knowing where the line is that means you do need the platform.
26 October 2026 · 7 min read CareersBreaking into cyber: the path I'd take if I were starting now
Pick one of the four directions, build something real and break it, learn to script, and get the first job through the side door. Written by someone whose first degree was in accounting.
26 October 2026 · 9 min read CMMC · Living pageSuspended is not repealed: where CMMC actually stands
What the deferral changed, what it did not, and why a contractor who halts 800-171 remediation because the assessment date moved has made an expensive mistake. Updated as the rules move.
Updated 12 September 2026 ISO 27001The Annex A remap is not a one-to-one exercise
Moving an ISMS from ISO 27001:2013 to 27001:2022 means remapping 114 controls to 93. The mistake most transitions make, and what it costs.
5 August 2026 · 6 min read · transition window closed Oct 2025