Incident Readiness: What the Team Must Decide Before Building
A practical security engineering field guide to incident readiness, covering risk, implementation, evidence, and team leadership.
Nathan Berg
How to Lead a Review of Product Security Incident Response
A practical security engineering field guide to product security incident response, covering risk, implementation, evidence, and team leadership.
Measuring Product Security Incident Response Without Vanity Metrics
A practical security engineering field guide to product security incident response, covering risk, implementation, evidence, and team leadership.
Turning Requirements for Product Security Incident Response into Delivery Guardrails
A practical security engineering field guide to product security incident response, covering risk, implementation, evidence, and team leadership.
Designing Product Security Incident Response: Trust Boundaries, Failure Modes, and Tradeoffs
A practical security engineering field guide to product security incident response, covering risk, implementation, evidence, and team leadership.
Linux Auditd Essentials for Privilege Escalation Detection
Auditd provides reliable, tamper-resistant logging for sensitive system activity. A focused ruleset can highlight privilege escalation attempts without flooding your logs. This post covers a minim...
A Practical Risk Model for Product Security Incident Response
A practical security engineering field guide to product security incident response, covering risk, implementation, evidence, and team leadership.
A Practical Failure Exercise for Security Exceptions
A practical security engineering field guide to security exceptions, covering risk, implementation, evidence, and team leadership.
Security Exceptions in Production: Signals That Show the Control Works
A practical security engineering field guide to security exceptions, covering risk, implementation, evidence, and team leadership.
Implementing Security Exceptions Without Slowing Delivery
A practical security engineering field guide to security exceptions, covering risk, implementation, evidence, and team leadership.