100 Days of Cyber: What I Learned—and Where We’re Heading
One hundred days of translating complex security work into human language revealed a red thread: we are not simply protecting systems. We are protecting promises.
Read on Medium ↗Writing & videos
Ideas for safer, more human digital journeys.
Reflections on cybersecurity, resilience, leadership and the work of turning difficult subjects into useful conversations.
The book series
Cyber Decisions: The Boardroom Briefing Series.
Ten short, practical briefings for leaders who want clearer cyber decisions without the jargon—written from more than two decades of cybersecurity leadership, governance and assurance.
12345678910
Cyber Risk Without the Jargon
A boardroom guide to oversight, accountability and resilience—turning uncertainty into decisions leaders can own.
The Cyber Dashboard
Twelve measures every board should demand: a one-page view of exposure, preparedness and resilience.
The First 72 Hours
An executive playbook for leading through a cyber incident when facts are incomplete and pressure is rising.
Ransomware at the Board Table
Decisions, trade-offs and recovery when operations are held hostage.
Resilient Together
Governing cyber risk across suppliers, cloud platforms and digital dependencies.
Governing AI Securely
A boardroom guide to AI, data and cyber risk—enabling responsible innovation without losing control.
Funding Cyber Resilience
How leaders set priorities, risk appetite and investment that protect what matters most.
The Cyber Tabletop
How boards rehearse the crisis before it arrives—and turn lessons into owned improvement.
Cyber Due Diligence
A leadership guide to digital risk in mergers, acquisitions and investment decisions.
Culture Makes Security Work
A boardroom guide to human risk, trust and accountability—because people make security real.
100DAYS OF CYBER
Beyond recovery: building true digital resilience
Can an organisation keep its promises when systems, suppliers or plans fail?
Read on LinkedIn ↗Stop writing policies. Start governing operations.
Why visibility and measurement matter more than another document on the shelf.
Read on LinkedIn ↗Connected through knowledge at NCSC One Conference
Reflections on digital connection, shared learning and the cybersecurity community.
Read the article ↗Upcoming ISACA courses and contributions
Explore ISO 27001, ISO 27701 and other professional learning opportunities.
View at ISACA ↗Featured talk
Webinar: Artificial Intelligence & the AI Act.
My session for Aedes (the Dutch association of housing corporations) on making sense of AI and the EU AI Act—governance leaders can actually use.
Watch & listen
Continue the conversation on YouTube.
Videos and conversations where complex ideas become a little easier to carry into everyday life.