top of page
Search
4 min read
COVID-19 Vaccination and Alzheimer’s
On July 21, 2021, President Joe Biden said during a CNN town hall, “ You’re not going to get COVID if you have these vaccinations . ” I...
3 min read
The Stroud Matrix (2024)
Risk is complicated, right? That's partly because the fundamentals are often overlooked. The Stroud Matrix is my attempt to take a step...
7 min read
How to write a non-fiction book
It has taken me 20 years to work out the process for writing and publishing quality books. Here is that process.
11 min read
The Future of AI (and Homo Sapiens)
Artificial intelligence risks are not technological or ethical issues but are fundamentally driven by species-level evolutionary survival...
3 min read
Swans Of All Colors
In the 21st century, the era of artificial intelligence and genetic engineering, we should expect to encounter ‘swans’ of all shapes,...
2 min read
Trust Your Intuition: A Structured Approach
The advice to "trust your gut" is often given as a standalone solution to complex decisions. However, this oversimplifies a nuanced...
3 min read
The All Opportunities Approach
We've heard of the all hazards approach to risk management. But what of it's counterpart, the all opportunities approach? Maybe another...
3 min read
Consequence Calibration Matrix
Human beings have great difficulty in making accurate judgments under uncertainty. Often, we must make difficult decisions when reliable...
3 min read
There Is No Risk That Isn't Positive
The ISO31000 definition of risk (the effect of uncertainty on objectives) includes both positive and negative outcomes. This is at odds...
6 min read
SWOT Analysis
A SWOT analysis, standing for Strengths, Weaknesses, Opportunities, and Threats, is a strategic planning tool that can be crucial for...
5 min read
Time Speeds Up With Age, And It Affects Risk Management
It's not just you. Time seems to go by faster for everyone as we age. This can have all sorts of weird side effects, and impact the way...
4 min read
Mental Models For Security Risk Management
In security risk management, the ability to adapt and respond to ever-evolving threats is paramount. This article describes some powerful...
2 min read
The Three Pillars of Effective Organizational Risk Management
In the complex and unpredictable landscape of modern business, risk management stands as a beacon guiding organizations toward...
3 min read
How to Design, Run, and Report on a Scenarios Workshop
Scenario workshops are invaluable for envisioning plausible futures and formulating strategies to navigate them. However, the success of...
3 min read
The Role of the Risk Matrix in Risk Management
Risk matrices have become ubiquitous in the business world. Risk matrices are a go-to approach for evaluating and prioritizing risks from...
1 min read
GRC vs. ERM: Understanding the Key Differences
Governance, risk, and compliance (GRC) is a broad term that refers to the processes and systems an organization puts in place to ensure...
4 min read
Emerging Security Risks In 2024
After a few decades of analysis, these are my thoughts about the emerging security risks that are likely to dominate in 2024. I'm kidding...
1 min read
How to Build a Risk Management Framework
This mini-course provides an in-depth understanding of risk management frameworks and their importance in organizations. You will learn...
7 min read
When Science Becomes Dogma
Examining the Reproducibility Crisis, Mask-Wearing Controversy, and Disagreements in Scientific Fields Many of my articles are about...
2 min read
Security Strategy: A Comprehensive 3D Approach
It shouldn't be news to anyone that a well-defined, multi-dimensional strategy is critical in our rapidly evolving landscape of the early...
6 min read
How to use Risk Matrices in High-Reliability Organizations (HROs)
I've worked in risk management for over 35 years, and a few common threads run through those years. We all agree (most of us, at least)...
2 min read
The Real Purpose of Student Assessments
Let's talk about exams and grades. Those magical letters and percentages that hover over students like a relentless storm cloud....
2 min read
Policy Assurance Compliance
PAC Model: The Triad Of Control Effectiveness Effectively managing an organization's controls requires a deep understanding of three key...
3 min read
A Light-Hearted Guide to Incorrectly Use a Risk Matrix (Pro Tip: Do the opposite)
Are you tired of using a risk matrix the right way? Want to make your life more exciting by adding more risk to your risk management...
bottom of page