// INSIGHTS

Thinking Out Loud

Perspectives on cybersecurity risk, AI strategy, OT/ICS security, and leadership — from 15 years of building and leading in this space.

Shadow AI Is the Risk That Looks Like Productivity

Shadow AI rarely enters an organization looking like a threat. It usually shows up looking useful. That is what makes it dangerous.

The disconnect between security spending and business outcomes isn't a budget problem. It's a framing problem.

The organizations getting real value from AI aren't starting with the technology. They're starting with the business problem.

Most security leaders are focused on AI-powered threats. The bigger risk is ungoverned AI adoption inside their own organizations.

When operational technology meets information technology, the security gaps aren't technical — they're organizational.

The lessons that shaped my approach to security leadership didn't come from frameworks. They came from building something from the ground up.

Not every risk demands a maximum response. The best security leaders know when to invest heavily and when to accept residual risk deliberately.