What Is a Policy
A Definition Updated for the AI Compliance Era Allow me to attempt a definition of a thing I have observed for two decades, across hundreds of corporate environments, and which has just…
Madame Colbac and the Russian Hat
A Note on Linguistic Confusion, Threat Attribution, and the Continental European Boardroom Some years ago, a senior executive at a European bank briefed her board on a cyber threat the company was…
The Post-Incident Communication as Liturgy
A Taxonomy of the Standardized Vocabulary of 2026 Breach Disclosures : There is a genre of corporate communication that, after twenty years of observation, has stopped pretending to be communication and has…
The Four-Month Cyber Resilience Act Countdown
Less than four months separate today from the moment when Article 14 of the EU Cyber Resilience Act becomes binding. On September 11, 2026, manufacturers of products with digital elements placed on…