Advice from the first line…
The ramblings of Dave Ferguson
20 Years of Making Cyber Security Simple, Visible and Less Risky.

Latest
Risk Registers Don't Work
Risk registers were designed for a world that changed slowly. That world is gone. We need to move from periodic risk assessment to continuous risk sensing, a live dashboard, not a quarterly…
All articles
How AI Breaks Everything We Know About Cyber Economics
AI · · 6 min readA No-Nonsense Guide to Governing AI Agents in Your Organisation
AI · · 7 min readHow I manage my tasks in Cyber Security
Ways of working · · 4 min readFinding the Best Cyber Security Initiatives for Your Organisation
Strategy · · 6 min readNo Bullsh*t Approach To Simplifying Cyber Supply Chain Risk
Supply chain · · 8 min readDeveloping an approach to Attack Path Analysis for Security Posture Management
Posture · · 7 min read90% of ‘your’ software is not written by your people
Supply chain · · 5 min readPreparing your Organisation for AI Cyber Warfare
AI · · 9 min readCritical Vulnerability Management Cheat Sheet
Vuln management · · 6 min read
About me
I help dynamic organisations reduce cyber risk, by developing pragmatic cybersecurity functions that align with the business needs and have a proven track record of increasing simplicity and promoting accountable visibility.