
Your Access Review Might Be a Checkbox Exercise
If I asked you whether your organization does periodic access reviews, you’d probably say yes. If I asked whether those reviews actually prevent peopl...
Real-world IT & cybersecurity career guidance, practical insights, and lessons from the field. Drawing on 26+ years in IT & cybersecurity and 14+ years in the classroom, I cover career decisions, skills, certifications, security operations, GRC, leadership, and what the work actually looks like.
Showing 12 of 89 articles

If I asked you whether your organization does periodic access reviews, you’d probably say yes. If I asked whether those reviews actually prevent peopl...

Most organizations have formal processes for accepting cybersecurity risks. Someone identifies a vulnerability or gap. The security team assesses it. ...

People looking at cybersecurity careers often hear that GRC is a good entry point, especially if you’re less interested in the deeply technical side. ...
Every security team I’ve worked with has a tight, well-rehearsed process for offboarding. Someone resigns, gets terminated, or retires, HR files a tic...
Ask most organizations what a penetration test costs, and they’ll quote you the invoice from the testing firm. That number is almost never the real co...
Ask most security teams whether they run tabletop exercises, and the answer is usually yes. Ask what actually happened during the last one, and the an...

The encryption protecting online banking, messaging apps, and sensitive corporate data faces a challenge that sounds like science fiction but isn’t: q...

The notification arrives without warning: IT has flagged unauthorized software on your laptop. What felt like a harmless productivity shortcut, pastin...

What to Do When Imposter Syndrome Hits You Mid-Career (Not Just at New Jobs) The promotion arrives. The project assignment lands in your inbox. The or...

7 High-Paying Cybersecurity Careers That Don’t Require Coding Skills The belief that cybersecurity requires programming expertise stops countless qual...

The Productivity Trap: When AI Tools Make You Less Secure at Work That AI assistant saving hours each week might be quietly creating the biggest secur...

Why 63% of Companies Have No AI Rules and What That Means for Your Career A recent wave of research from organizations including Tech.co, Gallup, and ...