Building, Measuring & Governing the Human Firewall. Strategic advisory, books, and keynotes for executive leaders.
Actionable frameworks for the human element in cybersecurity. How to measure, transform, and govern security culture across enterprise organizations.
Access Book ResourcesThe essential baseline for modern organizations: How to build genuine security awareness before the first major breach occurs.
Inquire Early AccessVerified publisher: Microsoft Windows
File origin: Hard drive on this computer
Show more details
Authenticated Executive Portal • Human Risk Management
Comprehensive risk calculation model for quantifying human firewall metrics across departments.
Turnkey enterprise policy document aligning human risk governance with ISO 27001 & NIST Standards.
Executive summary designed for Board members explaining fiduciary duties in human risk management.
Editable presentation deck for security leaders to justify Human Risk budget to C-Level and Boards.
Technology alone does not transform organizations. People do.
As a Group CIO, Board Member, international keynote speaker, and author, I help organizations bridge the gap between cybersecurity, business strategy, and human behavior. With more than two decades of international leadership experience, I have led global IT transformations, cybersecurity programs, M&A integrations, cloud migrations, and cultural change initiatives across multiple industries.
Today, my work focuses on one of the most overlooked risks in cybersecurity: people. Through measurable Human Risk Management programs, executive leadership engagement, and board-level governance, I help organizations transform security awareness from a compliance exercise into a business advantage.
I am currently authoring the books "Human Risk Management – From Security Awareness to Measurable Leadership Responsibility" and "Security Awareness Level 0", challenging long-standing assumptions about what organizations can realistically expect employees to know about cybersecurity.
Independent analysis of your enterprise IT security architecture and processes. Identification of critical vulnerabilities with clear executive priorities.
Learn moreEvaluation and strategic management of third-party vendors, supply chain risks, and Enterprise Agreements (e.g., Microsoft) for optimal ROI and compliance.
Learn moreInformed sparring partnership for Supervisory Boards to satisfy fiduciary duties and establish strategic Cyber Governance.
Learn moreInterim or consultative execution for complex IT transformations. Proven leadership without long-term organizational commitment.
Learn moreEngaging keynotes and sharp insights. Real-world executive stories instead of dry theory for your high-profile event.
Learn more"Attackers don't hack systems – they hack convenience, time pressure, and hierarchy. Leaders who fail to guide security culture leave survival to the next convincing email."
The following organizations have recently been disclosed by ransomware groups.
Data is automatically sourced from Ransomware.live, an independent platform monitoring ransomware leak sites and ransomware victim disclosures worldwide.
Security incidents happen every day. The organizations listed below represent publicly disclosed ransomware victims.
Fetching real-time ransomware intelligence...
| Metric | Value |
|---|---|
| Active Groups | 394 |
| Victims This Year | 6,773 |
| Victims This Month | 1,116 |
| Total Tracked Victims | 31,361 |
Every organization listed above invested in technology.
Yet many still became victims.
Cybersecurity is no longer purely a technical challenge.
It is a leadership challenge.
Why do organizations continue to suffer successful cyberattacks despite investing millions in technology?
This upcoming book challenges traditional awareness approaches and introduces Human Risk Management as a measurable leadership discipline.
Determine your estimated organizational security culture risk in 30 seconds.
Whether you're looking to improve Security Awareness, build a Human Risk Management program, discuss speaking opportunities, or explore leadership strategies, you can schedule a 30-minute meeting directly in my calendar.