Fook Hwa TanFaith · Clarity · ServiceWriting & videos
Reflections on cybersecurity, resilience, leadership and the work of turning difficult subjects into useful conversations.
New release
A new book for chairs, non-executive directors and executives who want to move from a reassuring dashboard to the decisions only leaders can make.
Follows a composite international board from a reassuring green dashboard into ransomware, a hard extortion decision, an acquisition carrying someone else's digital past, and the arrival of AI, robotics and quantum computing—with public-record cases from Maersk, SingHealth, Colonial Pipeline, the British Library and CrowdStrike along the way. Written for the European reality of NIS2, DORA and the AI Act, with board-ready questions each chapter and twelve ready-to-use board tools at the end.
The book series
Ten short, practical briefings for leaders who want clearer cyber decisions without the jargon—written from more than two decades of cybersecurity leadership, governance and assurance.
The complete collection brings together practical guidance on dashboards, incident leadership, ransomware, supplier resilience, AI governance, investment, tabletop exercises, due diligence and security culture. The individual boardroom briefings are also available separately in Kindle and paperback editions.
A boardroom guide to oversight, accountability and resilience—turning uncertainty into decisions leaders can own.
Kindle & paperback ↗Also via Books2Read ↗
Twelve measures every board should demand: a one-page view of exposure, preparedness and resilience.
Kindle & paperback ↗Also via Books2Read ↗
An executive playbook for leading through a cyber incident when facts are incomplete and pressure is rising.
Kindle & paperback ↗Also via Books2Read ↗
Decisions, trade-offs and recovery when operations are held hostage.
Kindle & paperback ↗Also via Books2Read ↗
Governing cyber risk across suppliers, cloud platforms and digital dependencies.
Kindle & paperback ↗Also via Books2Read ↗
A boardroom guide to AI, data and cyber risk—enabling responsible innovation without losing control.
Kindle & paperback ↗Also via Books2Read ↗
How leaders set priorities, risk appetite and investment that protect what matters most.
Kindle & paperback ↗Also via Books2Read ↗
How boards rehearse the crisis before it arrives—and turn lessons into owned improvement.
Kindle & paperback ↗Also via Books2Read ↗
A leadership guide to digital risk in mergers, acquisitions and investment decisions.
Kindle & paperback ↗Also via Books2Read ↗
A boardroom guide to human risk, trust and accountability—because people make security real.
Kindle & paperback ↗Also via Books2Read ↗One hundred days of translating complex security work into human language revealed a red thread: we are not simply protecting systems. We are protecting promises.
Read on Medium ↗Can an organisation keep its promises when systems, suppliers or plans fail?
Read on LinkedIn ↗Why visibility and measurement matter more than another document on the shelf.
Read on LinkedIn ↗Reflections on digital connection, shared learning and the cybersecurity community.
Read the article ↗Explore ISO 27001, ISO 27701 and other professional learning opportunities.
View at ISACA ↗Featured talk
My session for Aedes (the Dutch association of housing corporations) on making sense of AI and the EU AI Act—governance leaders can actually use.
Watch & listen
Videos and conversations where complex ideas become a little easier to carry into everyday life.
Selected publications
A selection of professional and academic contributions on security, resilience and AI—many in Informatiebeveiliging Magazine of the Platform voor Informatiebeveiliging (PvIB)—reaching back to my earliest research at the crossroads of informatics and economics.
Tan, F.H. — how AI is reshaping the security competence landscape.
Van Deursen, N. & Tan, F.H.
Montes Portela, C., Hoeve, M., Tan, F.H. & Slootweg, H.
Security in the headlines, translated for practitioners.
Master’s thesis — an early exploration of machine learning on financial news.
Bachelor’s thesis in Informatics & Economics.
Follow occasional work
I publish when I have something useful to add. For now, LinkedIn and YouTube are the best places to follow new writing, talks and resources. A proper opt-in mailing list will be added only when there is a dependable publishing rhythm.