Writing

Notes on access, identity and the boring parts of IT

Long-form, cited, and written for the person who actually has to do the work. Every figure links to the report it came from.

Security15 min read

Ten ways to secure your organization, ranked by the evidence

Ten things that actually reduce your risk if you run IT at a 100-500 person company, each with the research behind it — and an upfront note about which one we sell.

Read the post