Ideas and field notes

Blog

Practical writing about cybersecurity, compliance, and sustainable security operations.

Follow the data

Documenting where sensitive data comes from, what it passes through, and where it rests determines both the scope of an obligation and the threats that actually apply.