Publications

Articles, book references, and longer-form writing on enterprise security architecture, cloud, metrics, service management, MDR, threat management, and GRC.

Governance, Risk and Compliance

Governance, Risk and Compliance: Demystifying the Risk and Data Privacy Landscape is designed for apprentices, students, and professionals who need a practical grounding in organisational security, risk management, quality management, compliance, and data privacy.

I contributed the chapter on Enterprise Security Architecture and how it contributes to the GRC landscape.

Edition: 1. Published: 2026. ISBN: 9781040532348. Pages: 206.

Articles

Business-Driven Cloud Architecture

Design cloud architectures that drive business value, improve performance, support ROI, and align IT decisions to strategic goals.

Read article

Cybersecurity Metrics Programme

A strategic roadmap for building security metrics that support decision-making and demonstrate meaningful security value.

Read article

SABSA And Metrics

How SABSA can help design metrics that connect security outcomes to business goals and measurable value.

Read article

ITIL And Proactive Cyber Security

How ITIL service management practices can support proactive cyber security delivery, incident response, and change management.

Read article

MDR Service Value

Practical strategies for improving the value of Managed Detection and Response services in a changing threat landscape.

Read article

Transitioning MDR Services

Considerations for switching MDR providers, building internal capability, or moving to a hybrid operating model.

Read article

Service Management And Enterprise Architecture

How service management and enterprise architecture help strengthen cybersecurity resilience.

Read article

Secure Software Procurement

A Computer Weekly article on buyer accountability and stronger expectations for secure software procurement.

Read article

OT Cybersecurity In Transport

Security implications of modern road transport infrastructure, traffic management, roadside systems, and connected vehicles.

Read article

Threat And Vulnerability Management

Approaches for improving cyber resilience through threat detection, vulnerability management, and security operations.

Read article