Insights & Perspectives

August 31, 2026·7 min read

Building personal projects with AI agents taught me how much the product owner seat shapes the outcome, and why technical depth in that seat matters more than it ever has.

June 7, 2026·12 min read

PCI DSS 4.0 finally gives you two legitimate ways to drop forced password expiry. Here is when MFA alone is enough, and how to build a customized approach that survives your QSA.

May 10, 2026·14 min read

The AWS us-east-1 outage was a reminder that every architecture is a bet on availability. Here's how to make sure yours is a deliberate one.

May 7, 2026·4 min read

When there's nothing to inherit — no policies, no risk register, no documentation — here's how to build an information security management system that actually works.

April 23, 2026·5 min read

After leading our PCI DSS Level 1 migration across multiple entities, here are the lessons that surprised me most — and what I wish I'd known going in.