— Blog

Notes on security, risk and building programs.

Field notes from building enterprise security programs, where reducing material risk is always balanced against the speed of the business. New posts as I publish them.

Endpoint Security · · 3 min read

Endpoint Security Is About Sustainable Risk Reduction

The right answer depends on the company. A control only matters if it meaningfully reduces risk and can be operated at scale, from least privilege and application control to hardening, Linux, and governed exceptions.

Read post