Just so you know, @gattaca and I are the Infosec Pros From Dover. (Haven’t figured out yet which one of us is Hawkeye and which is Trapper John.)

Recovering industry analyst, research director & CISO. Senior Fellow at @AtlanticCouncil @CyberStatecraft. Single, childful cat lady.
General Content Warnings: snark, bad words, even worse puns, occasional flashes of borrowed insight, plugging of selected $employer events and publications, random brain radio songs, multilingual commentary
Note: Sufficiently advanced shitposting is indistinguishable from thought leadership. — @jwgoerlich
Stage | Vānaprastha |
Pronouns | She/her |
Chocolate | Yes please |
#ScalziRules | https://whatever.scalzi.com/2025/04/16/the-official-john-scalzi-social-media-faq/ |
Just so you know, @gattaca and I are the Infosec Pros From Dover. (Haven’t figured out yet which one of us is Hawkeye and which is Trapper John.)
Lmao.
We're not the first to promote a strategy of fractional CISOs building programs so that a full time CISO can manage it, but Pablo Breuer and I committed the strategy to a comprehensive and specific blog post I think CEOs and board members considering a CISO hire might find useful framing:
https://epsd.io/blog/strategic-deployment-of-a-fractional-ciso/
Before hiring their first Chief Information Security Officer (CISO), CEOs and boards should consider a fractional CISO (F-CISO) to build foundational security programs that set the permanent CISO up for success. This strategy addresses a critical disconnect: executives often view security breaches and compliance failures as technical problems, but these business-threatening issues typically stem from cultural and process deficiencies requiring organizational transformation, not just technical expertise.
Metallica tribute #StarWars Imperial band 🎸🔥
Created with @GoogleLabs
Whisk and animated with Veo 2.
Everyone’s jumping on the MCP bandwagon—but is it really an “open standard”? I took a closer look at what’s missing, why it matters, and what we risk if we skip the hard parts of standardization. If you’re watching AI infra, you’ll want to read this.
https://sphericalcowconsulting.com/2025/06/17/the-mcp-bandwagon/