01
Board AI & Decision Intelligence
Decision infrastructure, board evidence, risk taxonomies, control systems and reporting that ends with a clear ask.
Explore articles →Writing & Media
Ideas that turn risk work into decisions.
Board-level writing on AI governance, cyber risk, operational resilience, cloud, quantum and executive judgement. Not more information. Better questions, clearer evidence and decisions that can survive scrutiny.
Forbes
CIO
CSO
ISACA
Senior Executive
Five authority territories
Start with the decision in front of you.
The writing is organised around the recurring choices boards and executives must make, rather than around publication dates or technology labels.
02
AI Governance & Assurance
Inventories, accountability, model evidence, human oversight, assurance and the controls behind responsible adoption.
Explore articles →03
Cyber Resilience & Decision Latency
Board metrics, systemic dependencies, incident escalation and the organisational friction between signal and action.
Explore articles →04
Cloud, Quantum & Infrastructure
The hidden choices behind AI cloud economics, technology dependency, cryptographic transition and long-horizon exposure.
Explore articles →05
Risk Leadership & Executive Judgement
Leadership under pressure, CISO effectiveness, mentorship and the human capacity to make difficult decisions well.
Explore articles →Featured thinking
Thirteen articles. One coherent argument.
Each article is paired with the decision it helps a board or executive team make.
Frontier AI will not break finance. Slow cyber decisions will
Frontier AI compresses the time between known weakness and exploitation. The board problem is whether ownership, patching, supplier governance and assurance can move at the same speed.
Decision this helps you make
Whether important business services can identify, escalate, remediate and evidence material cyber exposure before attacker speed overtakes governance speed.
Read the CIO article↗
Open the Frontier AI Cyber Risk Position™→
The cloud strategy I helped build didn’t survive contact with AI
How AI broke assumptions about compute, data, economics and governance, and why the reset began with decision design.
Decision this helps you make
Whether your cloud operating model can support production-scale AI without losing cost control or evidence.
Read the CIO article↗
Your problem isn’t DORA, NIS2 or SOX controls. It’s decision infrastructure
Why many apparent control gaps are actually failures of ownership, escalation, evidence and decision authority.
Decision this helps you make
Whether your control environment produces timely, owned and reconstructable decisions.
Read the Forbes article↗
Assurance checks the receipts before the board gets the bill
AI assurance should test approvals, exceptions, validation, change history, rollback and evidence, not repeat management claims.
Decision this helps you make
What evidence the Audit Committee should require before accepting AI assurance.
Read the ISACA article↗
Cybersecurity management for boards: Metrics that matter
A practical separation of technical activity from the financial, governance, operational and strategic measures boards need.
Decision this helps you make
Whether your cyber dashboard informs choices or merely reports activity.
Read the CSO article↗
Why pharma risk registers misclassify their biggest third-party exposures
The governance locus test separates where an event hurts from where the underlying control failure occurred.
Decision this helps you make
Whether investment is targeting the real source of supplier exposure.
Read the Forbes article↗
Quantum risk is a decision layer problem, not a cryptography problem
Quantum exposure cuts across data, suppliers, capital allocation, customer commitments and board appetite.
Decision this helps you make
Which cryptographic dependencies require ownership, funding and migration decisions now.
Read the Forbes article↗
Risk taxonomies that turn “high risk” into a decision the board can make
A stable event-based taxonomy makes risks comparable, aggregable and usable under pressure.
Decision this helps you make
How to translate risk labels into fund, accept, defer or test decisions.
Read the Forbes article↗
I gave our developers an AI coding assistant. The security team nearly mutinied
What happens when productivity ambition arrives before decision rights, source controls and evidence expectations.
Decision this helps you make
How to enable AI-assisted development without reconstructing governance after deployment.
Read the CIO article↗
Fixing the broken AI governance playbook
Why committees and policies fail when governance is detached from real use cases, incentives and operating decisions.
Decision this helps you make
Whether AI governance helps teams move safely or merely adds ceremonial approval.
Read the CIO article↗
Six control families that turn regulatory chaos into a working control system
A typological approach that groups unstable regulatory clauses into stable control families the business can operate.
Decision this helps you make
Whether regulation is driving a coherent control system or an expanding filing cabinet.
Read the Forbes article↗
Why outsourced cyber defenses create systemic risks
Vendor efficiency can conceal concentration, correlated failure and decision dependencies that no contract can fully transfer.
Decision this helps you make
Where outsourced security has become a business-critical dependency requiring executive oversight.
Read the CSO article↗
How coaching and mentorship are rewiring cyber leadership
Cyber leaders need more than technical expertise. They need judgement, influence and a safe place to rehearse difficult choices.
Decision this helps you make
How to develop leaders who can translate exposure into executive action.
Read the CIO article↗
Choose your role
Different leaders need different evidence.
Use the publication library as a role-specific briefing room rather than a general archive.
Audit & Risk Committee Chairs
Focus on oversight, evidence integrity, accountability and the decisions that should reach the Committee.
- Board metrics that matter
- Decision infrastructure
- AI assurance receipts
Chief Risk Officers
Focus on comparability, materiality, enterprise dependencies and funding choices across risk domains.
- Risk taxonomies that work
- Pharma third-party exposure
- Quantum decision ownership
Chief Audit Executives
Focus on independent challenge, evidence quality, assurance mapping and closure through retest.
- AI assurance evidence
- Control system design
- Audit-ready AI governance
CIOs & CISOs
Focus on cloud economics, AI operating models, decision rights, technology dependencies and resilience.
- AI cloud strategy reset
- AI coding assistants
- Outsourced cyber dependency
From article to action
The writing is the front door.
A strong article should not disappear into an archive. It should become a reusable decision asset and a route into practical application.
Step 01
Read
Recognise the decision gap through a clear argument, practical example and board-level question.
Step 02
Use
Apply a checklist, scorecard, evidence request or decision worksheet derived from the article.
Step 03
Discuss
Bring the issue into a leadership meeting, Committee session or executive roundtable.
Step 04
Diagnose
Test the organisation’s current evidence, authority, controls and decision readiness.
Step 05
Act
Convert the findings into funded decisions, named owners, closure evidence and measurable outcomes.
“The article is rarely the final asset. It is the first visible surface of a much larger body of value.”
Executive tools
Turn the strongest ideas into working instruments.
These article-led assets create a practical bridge from public insight to board discussion, diagnostic review and advisory support.
Six AI Assurance Receipts
The minimum evidence an Audit Committee should expect before accepting management assurance.
Request the executive brief →AI Cloud Decision Checklist
A practical test of workload classification, data pathways, cost visibility, thresholds and authority.
Request the checklist →Board Cyber Metrics Scorecard
Assess whether reporting measures activity, exposure, evidence confidence and decision urgency separately.
Request the scorecard →Decision Infrastructure Health Check
Test whether critical risk decisions have defined triggers, owners, evidence, authority and review points.
Request the health check →Frontier AI Cyber Risk Position™
One page per important business service: service, scenario, owner, gap, decision, funding, date and proof.
Open the working instrument →Bring the thinking into the room
Use an article to start the right executive conversation.
Selected articles can be developed into private board briefings, Audit Committee sessions, executive roundtables, diagnostics and sector-specific decision papers.