I managed Macs for years without knowing whether they were really hardened. This is how I’m mapping the CIS Benchmark onto a fleet of company Macs with NIST mSCP and the Iru MDM, what the first check found, the gotchas, and how we plan the rollout.
I’m not a software developer, yet I ship real code with an AI assistant, and this is the exact workflow that keeps it safe. Follow one change from a plain request in Claude Code all the way to production, through pull requests, tests, AI reviewers, Aikido, Strix, Fly.io previews, branch protection a
I led my first response to a hacked account and froze at the start. Here’s how I got moving again, plus thirteen lessons for beginners: login alerts, passkeys, BIMI, collecting evidence, the five whys and more.
Who secures what in the cloud: the provider or you? This standalone explainer covers the shared responsibility model of AWS, Azure and Google Cloud through a restaurant that leases its kitchen, buys from suppliers and hires caterers, and ends with practical checklists for IaaS, PaaS, SaaS and your n
A complete CMMC course in 9 lessons, free on YouTube. Every idea is explained through a restaurant, so the concepts stick without memorizing.
What happens when thousands of fake orders hit a restaurant at the busiest hour of the week, and what that teaches us about DDoS attacks? Learn botnets, flood types, rate limiting, load balancing, CDNs, scrubbing, web application firewalls and a real response plan, explained for complete beginners.
What happens when ransomware hits, and how to contain it, keep the business running and recover, explained through a restaurant whose walk in freezer died overnight. Learn MTPD, RTO and RPO, degraded mode, immutable and offline backups, testing and audit evidence, with no background needed.
Follow one realistic phishing incident from the first alert to the final lessons learned, and see how a SOC triages, contains, hunts and recovers while the business keeps running. Every step is told through a fast food drive thru at Friday lunch rush, with practical tips for SOC analyst job intervie
Why “trusted inside, untrusted outside” stopped working, and how zero trust replaces it, explained through a busy Friday night restaurant kitchen. Covers the NIST SP 800 207 building blocks and tenets, the five CISA pillars and four maturity stages, a practical roadmap, audit evidence and the most c
A complete ITIL course in 13 lessons, free on YouTube. Every idea is explained through a restaurant, so the concepts stick without memorizing.
