top of page
Search


COVID-19 Vaccination and Alzheimer’s
On July 21, 2021, President Joe Biden said during a CNN town hall, “ You’re not going to get COVID if you have these vaccinations . ” I...
4 min read

The Stroud Matrix (2024)
Risk is complicated, right? That's partly because the fundamentals are often overlooked. The Stroud Matrix is my attempt to take a step...
3 min read

How to write a non-fiction book
It has taken me 20 years to work out the process for writing and publishing quality books. Here is that process.
7 min read

The Future of AI (and Homo Sapiens)
Artificial intelligence risks are not technological or ethical issues but are fundamentally driven by species-level evolutionary survival...
11 min read


Swans Of All Colors
In the 21st century, the era of artificial intelligence and genetic engineering, we should expect to encounter ‘swans’ of all shapes,...
3 min read


Trust Your Intuition: A Structured Approach
The advice to "trust your gut" is often given as a standalone solution to complex decisions. However, this oversimplifies a nuanced...
2 min read


The All Opportunities Approach
We've heard of the all hazards approach to risk management. But what of it's counterpart, the all opportunities approach? Maybe another...
3 min read

Consequence Calibration Matrix
Human beings have great difficulty in making accurate judgments under uncertainty. Often, we must make difficult decisions when reliable...
3 min read


There Is No Risk That Isn't Positive
The ISO31000 definition of risk (the effect of uncertainty on objectives) includes both positive and negative outcomes. This is at odds...
3 min read

SWOT Analysis
A SWOT analysis, standing for Strengths, Weaknesses, Opportunities, and Threats, is a strategic planning tool that can be crucial for...
6 min read


Time Speeds Up With Age, And It Affects Risk Management
It's not just you. Time seems to go by faster for everyone as we age. This can have all sorts of weird side effects, and impact the way...
5 min read

Mental Models For Security Risk Management
In security risk management, the ability to adapt and respond to ever-evolving threats is paramount. This article describes some powerful...
4 min read

The Three Pillars of Effective Organizational Risk Management
In the complex and unpredictable landscape of modern business, risk management stands as a beacon guiding organizations toward...
2 min read


How to Design, Run, and Report on a Scenarios Workshop
Scenario workshops are invaluable for envisioning plausible futures and formulating strategies to navigate them. However, the success of...
3 min read

The Role of the Risk Matrix in Risk Management
Risk matrices have become ubiquitous in the business world. Risk matrices are a go-to approach for evaluating and prioritizing risks from...
3 min read


GRC vs. ERM: Understanding the Key Differences
Governance, risk, and compliance (GRC) is a broad term that refers to the processes and systems an organization puts in place to ensure...
1 min read

Emerging Security Risks In 2024
After a few decades of analysis, these are my thoughts about the emerging security risks that are likely to dominate in 2024. I'm kidding...
4 min read

How to Build a Risk Management Framework
This mini-course provides an in-depth understanding of risk management frameworks and their importance in organizations. You will learn...
1 min read


When Science Becomes Dogma
Examining the Reproducibility Crisis, Mask-Wearing Controversy, and Disagreements in Scientific Fields Many of my articles are about...
7 min read

Security Strategy: A Comprehensive 3D Approach
It shouldn't be news to anyone that a well-defined, multi-dimensional strategy is critical in our rapidly evolving landscape of the early...
2 min read


How to use Risk Matrices in High-Reliability Organizations (HROs)
I've worked in risk management for over 35 years, and a few common threads run through those years. We all agree (most of us, at least)...
6 min read


The Real Purpose of Student Assessments
Let's talk about exams and grades. Those magical letters and percentages that hover over students like a relentless storm cloud....
2 min read

Policy Assurance Compliance
PAC Model: The Triad Of Control Effectiveness Effectively managing an organization's controls requires a deep understanding of three key...
2 min read


A Light-Hearted Guide to Incorrectly Use a Risk Matrix (Pro Tip: Do the opposite)
Are you tired of using a risk matrix the right way? Want to make your life more exciting by adding more risk to your risk management...
3 min read
bottom of page