Analysis library
Clear analysis for consequential cybersecurity decisions.
Browse independent analysis of cybersecurity architecture, business risk, resilience, AI, and emerging technology.
-
Strategic Cybersecurity Budgeting: Fund Outcomes, Not Tool Lists
Build cybersecurity budgets as portfolios of risk-reduction and resilience outcomes—not collections of tools, renewals, and disconnected projects.
-
Memory-Safe Software Roadmaps: Moving Beyond “Rewrite It in Rust”
A memory-safe software roadmap changes engineering defaults, prioritizes high-risk components, supports incremental migration, and strengthens unavoidable legacy code.
-
Cloud Migration Security: Modernize the Architecture, Not Just the Hosting
Cloud migration should modernize identity, segmentation, observability, data governance, resilience, and ownership—not merely relocate legacy weaknesses.
-
UEFI Secure Boot and Firmware Resilience: What Organizations Should Verify
Secure Boot is one part of firmware resilience. Organizations must also govern keys, updates, configuration state, measurement, exceptions, and recovery.
-
SEC Cybersecurity Disclosure Rules: Building a Defensible Decision Process
Public companies need a rehearsed, evidence-based process for cybersecurity materiality, governance, incident disclosure, and cross-functional decision-making.
-
Reducing Systemic ICS Vulnerabilities: Architecture Priorities for OT Leaders
Reduce systemic ICS risk by controlling exposure and engineering access, validating segmentation, protecting configurations, and designing around operational consequence.