strategy

The security practice registry

Are we merely historians of our own infrastructure?

Jun 6 • Michael Corn

Shared control and cross-functional discomfort

Services not functions

May 19 • Michael Corn

The market-driven decomposition of security

Coherence vs. entropy

Apr 5 • Michael Corn

How should an organization respond to a breach?

Not with a strongly worded letter.

Mar 23 • Michael Corn

Cybersecurity and the valorization of misinformation

Epistemic collapse seems inevitable

Mar 13 • Michael Corn

The choices we make

Cybersecurity without institutional translation is operationally busy but strategically invisible

Mar 3 • Michael Corn

The tinnitus of cybersecurity: cyber incident reporting

Be the positive deviant

Jan 22 • Michael Corn

Do we need a cybersecurity research program?

If we cannot answer these questions, others will answer for us.

Dec 9, 2025 • Michael Corn

The paradox of anticipatory defeat

Go big or go home: incrementalism vs. spectacle

Dec 3, 2025 • Michael Corn

Do we need a new cybersecurity organization?

What does it mean for higher education to exercise agency.

Nov 27, 2025 • Michael Corn

User resistance is feedback, not defiance

Nov 5, 2025 • Michael Corn

Are we winning or losing?

Cybersecurity as a metaphor for the human condition (or is it the reverse?)

Oct 25, 2025 • Michael Corn

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts