Pillar

Security decisions for a company with no security team

What a company with no security staff does first, second, and not at all.

Articles

• Jul 2026

  Why your backup probably won't work

  Draft copy — unfinished

  Assume the backup is fine and the restore is not. The failure you will meet is a restore that runs too slowly to matter, or one that recovers files while leaving the system that used them unbuildable. Pick your most important system, restore it against a clock, and record the time.

Not written yet

Questions this pillar owns

• What do I do first if we have never done anything about security?
• Who is accountable when a system goes down on a weekend?
• What questions should a board ask about cyber risk?
• Is cyber insurance worth it, and what does it not cover?

This list is the actual queue, read from the same file the drafting pipeline reads. It is published because a visible queue is more useful than a tidy page.

From the stage

What to spend your one budget cycle on

CEOs, boards, and owners of companies that carry real technology risk and have no full-time technology staff to hand it to

Check availability