Ordfall · Newsroom · Security
- Publications
- 03
- Latest publication
Security
Notes on exposure, containment, and what a control has to change on the day of an incident to stop being paperwork.
Publications
In order of publication.
From Alert Volume to Decision Quality
More detection is not more security. A queue nobody can read produces the same blindness as no detection at all, with the difference that it consumes a budget and looks like prudence.
Identity Is the Control Plane of the Modern Enterprise
When everything is an interface and a cloud account, the boundary stops being the network. Service identities, long-lived credentials and privilege that only grows define the real reach of the next incident.
Cybersecurity Cannot Remain a Compliance Exercise
A control that does not change how the system behaves on the day of the incident is paperwork. What separates a control that operates from one that merely exists fits into four questions, and documentary evidence answers none of them.
Only sections that already carry a publication appear here.