Writing a risk scenario A risk scenario is a fictional but plausible event that could harm your organization. Writing one well improves communication with others…

I wish all security pros practiced a scenario-first mindset. Explanations based on risk scenarios before jumping to best practices, gaps, controls, compliance etc. I wrote an essay to coach on this: "Writing a risk scenario"

medium.com/starting-up-...

The “Working from China” Problem When employees want to work remotely from “risky” places

I wrote about that moment every security team faces when someone asks if they can work from China for a while, and then everyone freaks out.

magoo.medium.com/the-working-...

Bookmarking this for incident timelines: markwhen.com

Oh shit

bsky.app/profile/badt...

Just got here, where is everyone?