My Writing

I write about security leadership and technology, sharing strategies, practical frameworks, and field notes. My goal is to capture what I've learned and contribute to conversations in our community.

• Artificial Intelligence My Favorite Findings From the AI Security Decisions Report
  Over 300 security professionals told Sounil Yu and me how their organizations secure AI. We published what we learned as the AI Security Decisions Report, so you can compare your AI security...
• Fun Brooklyn History: The Mystery of Club 338
• Artificial Intelligence The Security Autonomy Matrix: Deciding AI Authority
  The Security Autonomy Matrix is a framework for deciding how much authority to grant your security AI agents, one kind of action at a time. You record those decisions in one table, one row per...
• Artificial Intelligence Five Questions to Answer Before Buying an AI Security Product
  In the young security-for-AI market, what a product protects and how it ships can differ from what its label promises. With five questions drawn from the AI Defense Matrix Catalog work, you'll know...
• Artificial Intelligence A Field Guide to the AI Security Market
  The market for products that secure AI is crowded and hard to read, with overlapping categories and products that each do many jobs. With the AI Defense Matrix, you can ask the right questions, tell...
• Product Management Cyber Company Profiles: Independent Analysis of Security Vendors
  Judging a security vendor from its own materials tells you little about how it compares to the rest. Cyber Company Profiles scores hundreds of cybersecurity companies from public sources.