Dave M. BrownWriting
Articles and posts on security and compliance
What I've learned building security and compliance programs, from scoping and AI governance to layered defense. Also published on LinkedIn.
Article · Compliance scoping · 6 minute read
The Certificate Arrived. Then the Controls Fell Apart.
Why compliance programs fail after the first audit, and how scoping around revenue, data, and promises builds controls that last.
Read the article → Post · AI governance · 2 minute readSaying yes to AI, with conditions
How a restricted pilot let the business adopt an enterprise AI tool quickly without losing control of its data.
Read the post → Post · Security operations · 2 minute readTraining lowers the click rate. Detection catches the rest.
Why phishing defense needs both people and a SOC, and what that layered approach delivered over five years.
Read the post →