Lessons from the work. Fractional technology leadership, security programs, and Azure architecture for SaaS and B2B software companies.
Every SaaS company selling to enterprise hits the security questionnaire wall, again and again. A practitioner take on why the questions keep coming and how to stop answering each one from scratch.
Read post →AI isn't a new category of risk. It's a new vector for existing ones. How to govern AI tools by extending the security program you already have, before the customer questionnaire arrives.
Read post →Twelve months of preparation, a four-terabyte database, and a single maintenance window. The decisions that made an Azure migration uneventful, and the ones I'd revisit today.
Read post →Most companies reach for a CTO when something breaks, but the role is a bundle of jobs that can be filled by a combination of people. A founder's guide to asking a better question.
Read post →A practitioner's account of building a SOC 2-ready information security program from nothing, and sustaining four consecutive SOC 2 Type 2 audits with zero findings.
Read post →A guide for business leaders who need senior technology leadership without a full-time executive hire. What the role really involves, and what it doesn't.
Read post →