About

I've spent over 25 years at the intersection of IT audit, cybersecurity controls, and identity governance. Today I work as an Identity Strategist, helping organizations understand and operationalize identity as a security and compliance discipline — not just an HR or IT function.

This site is for the practitioners, the skeptics, and the genuinely curious. I write about the systems that hold everything together — and what happens when they don't.

If you're interested in guest authorship or have a topic you'd like to see explored, I'd love to hear from you.