Field Notes

Write-ups on network architecture, infrastructure, and security.

Compounding Discipline: How It All Reinforces Itself
Threat & DefenseAdvanced· 10 min

Compounding Discipline: How It All Reinforces Itself

Why security, process, and planning don't work as well in isolation as they do together

Sep 25, 2026

The Overlooked Power of Project Management in Engineering
Threat & DefenseApplied· 10 min

The Overlooked Power of Project Management in Engineering

Why the discipline that keeps a project organized is, quietly, also a security and quality discipline

Sep 25, 2026

Why Process Beats Heroics in Software Development
Threat & DefenseApplied· 11 min

Why Process Beats Heroics in Software Development

An organized development process isn't bureaucracy; it's what keeps quality and security from depending on any one person's memory

Sep 25, 2026

Vulnerability Management: Find It, Prioritize It, Patch It
Threat & DefenseApplied· 11 min

Vulnerability Management: Find It, Prioritize It, Patch It

A practical look at the unglamorous discipline that decides whether known flaws get fixed before or after they're exploited

Sep 25, 2026

The Discipline of Input Validation
Threat & DefenseApplied· 11 min

The Discipline of Input Validation

Why trusting input is how systems break, and why validation is the cheapest security control you'll ever implement

Sep 25, 2026

Why Cybersecurity Actually Matters
Threat & DefenseFoundational· 11 min

Why Cybersecurity Actually Matters

Beyond the headlines: what's really at stake, and why it's everyone's job, not just the security team's

Sep 25, 2026

From GRC Compliance to Continuous Exposure Management: Quantifying Cyber Risk with Open-Source Architecture
Threat & DefenseAdvanced· 4 min

From GRC Compliance to Continuous Exposure Management: Quantifying Cyber Risk with Open-Source Architecture

Introducing a Continuous Threat Exposure Management (CTEM) framework integrated with FAIR cyber risk quantification: moving from static GRC compliance to continuous, board-level risk visibility.

Sep 14, 2026

Bridging Technical Scanning to Enterprise Governance: How Open-Source Vulnerability Management Drives GRC Compliance
Threat & DefenseAdvanced· 4 min

Bridging Technical Scanning to Enterprise Governance: How Open-Source Vulnerability Management Drives GRC Compliance

How open-source vulnerability scanning workflows transform raw system telemetry into auditable compliance evidence across ISO 27001, SOC 2, NIST SP 800-53, and PCI-DSS.

Sep 14, 2026

Page 1 of 2Older →

Get new posts by email: no spam, unsubscribe anytime.