Ideas for the Decisions That Matter.
Original analysis for enterprise technology, cybersecurity, and risk leaders, focused on defensible design choices and operating reality.
The Architect’s Brief
13 evidence-led analyses of enterprise architecture and security decisions.
What Happens When a Trust Anchor Fails?
A trust-store incident is an enterprise dependency problem: first find which systems validate the chain, then decide how to propagate distrust without breaking necessary services.
Remote Support Brokers Are Tier-0 Infrastructure
Treat remote support as a tier-zero-equivalent risk domain for architecture planning: minimize broker reach, isolate credentials, keep independent audit evidence and define a rebuild decision.
Applying Zero Trust to Operational Technology
OT Zero Trust is an architectural outcome, not the literal transplantation of an IT access agent. Prioritize verified remote identity, narrow conduits, passive monitoring and engineering-approved changes.
When Collaboration Platforms Become Sensitive Data Boundaries
Application security must include the confidentiality of adjacent files and the reach of the server process identity. Cloud-hosted service claims should not be substituted for Data Center findings.
A WAF Rule Is Not a Patch
A virtual patch can buy response time, but its effectiveness depends on canonicalization, route coverage, testing and monitoring. It cannot replace remediation of the underlying vulnerable application.
Rehearsal Is Not Restoration
Restoration assurance should be measured by a recoverable business capability, not merely by completion of a simulated response meeting. Include integrity, clean credentials and post-restore validation.
The Cloud Token Is a Security Boundary
A token lifecycle is part of the enterprise security architecture, not an incidental identity-provider setting. Effective controls cover signing keys, intended audience, token lifetime, client storage and provider-specific revocat
When Attackers Operate at Machine Speed
Automation is safest where actions are reversible, scoped and well observed. Service shutdown, credential revocation and network isolation should have distinct approval thresholds based on blast radius.
Payment Systems Need Independent Transaction Trust Boundaries
Payment integrity requires separate trust and evidence domains. Authorization must be tied to transaction characteristics, and reconciliation should compare independently obtained transaction and settlement records.
Legitimate Sign-In Flows Can Be Phished
Consent and device-code controls must be reviewed as authorization decisions. Preventing credential phishing is insufficient if a user can approve broad permissions for an unfamiliar application.
AI-Assisted Vulnerability Discovery Still Needs Human Authority
There should be a distinction between discovery authority and change authority. Findings move through reproduction, impact analysis and human disposition before a code change or production isolation is authorized.
The Help Desk Is an Identity Attack Surface
The help desk is part of the identity control plane. A request to recover an account should be authorized against independently maintained records, not the contact route or personal details supplied during the request.
When Trusted Software Becomes the Attack Path
Supplier reputation is not an authorization policy. Enterprises need assurance about who may update a component, which build process produced it, what secrets the process could access, and where the resulting artifact may run.
Architecture in Practice
13 implementation-oriented checklists and decision worksheets.
Where Are Your Enterprise Trust Stores?
A practical five-check architecture worksheet for cryptographic trust, covering trust boundaries, ownership, evidence and exception decisions.
Ransomware Resilience Starts Before Encryption
A practical five-check architecture worksheet for privileged access and response, covering trust boundaries, ownership, evidence and exception decisions.
OT Remote Access: Five Questions for Vendors
A practical five-check architecture worksheet for ot and critical infrastructure, covering trust boundaries, ownership, evidence and exception decisions.
Data Center Application Exposure Checklist
A practical five-check architecture worksheet for enterprise application security, covering trust boundaries, ownership, evidence and exception decisions.
Virtual Patch Register: Owners and Expiry Dates
A practical five-check architecture worksheet for application security, covering trust boundaries, ownership, evidence and exception decisions.
Restore Order: Which Critical Services Come Back First?
A practical five-check architecture worksheet for cyber resilience, covering trust boundaries, ownership, evidence and exception decisions.
Token Inventory: A One-Page Executive Checklist
A practical five-check architecture worksheet for cloud and identity, covering trust boundaries, ownership, evidence and exception decisions.
Automated Containment: When Must a Human Approve?
A practical five-check architecture worksheet for threat detection and ai, covering trust boundaries, ownership, evidence and exception decisions.
Internet-Exposed OT: Verify Before You Assume Isolation
A practical five-check architecture worksheet for financial services security, covering trust boundaries, ownership, evidence and exception decisions.
OAuth Consent Review: Five Questions Before Approval
A practical five-check architecture worksheet for identity and cloud, covering trust boundaries, ownership, evidence and exception decisions.
A Validation Gate for AI-Discovered Findings
A practical five-check architecture worksheet for ai governance, covering trust boundaries, ownership, evidence and exception decisions.
MFA Reset and Account Recovery Decision Tree
A practical five-check architecture worksheet for identity security, covering trust boundaries, ownership, evidence and exception decisions.
Dependency Quarantine Checklist
A practical five-check architecture worksheet for supply chain security, covering trust boundaries, ownership, evidence and exception decisions.
Architectural Foundations
Three established essays on Zero Trust, AI security and SIEM engineering.
Zero Trust Is an Architecture Decision, Not a Product Purchase
An architecture-first perspective on identity, application access, segmentation, and control validation across complex enterprise environments.
Securing AI Systems Before They Reach Production
A practical architecture perspective on protecting AI infrastructure, sensitive data, model access, and operational accountability.
Why More Security Logs Do Not Always Mean More Visibility
Practical considerations for SIEM modernization, detection content, log quality, and measurable security operations improvement.