Joshua Goldfarb

From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.

Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.

As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.

Beyond monitoring and compliance, visibility acts as a powerful deterrent, shaping user behavior, improving collaboration, and enabling more accurate, data-driven security decisions.

Applying SOC-level rigor to the rumors, politics, and 'human intel' can make or break a security team.

Security failures don’t always start with attackers, sometimes they start with missing truth.

Security advice fails when it comes from those who don’t bear the consequences and won’t be responsible for making it work.

When familiar security concepts carry unfamiliar meanings for different audiences, teams talk past each other without even realizing it. This silent disconnect weakens communication,...

If you are recruiting for a Field CISO, Field CTO, etc., or are looking to leverage a resource at your company in one of...

Bringing politics into professional spaces undermines decision-making, collaboration, and ultimately weakens security teams.

By focusing on fundamentals, enterprises can avoid the distraction of hype and build security programs that are consistent, resilient, and effective over the long...

Once a manageable function, security operations has become a battlefield of complexity.

Strong security doesn’t just rely on tools—it starts with trust, clarity, and sincerity from the top down.

Many security professionals feel pressured to pursue leadership roles, but success can also mean going deeper, not just higher.

In a world full of noise and promises, it’s those who consistently deliver behind the scenes who build the most respected and rewarding careers.

The greatest security policies in the world are useless if enterprises don’t have a reasonable, consistent, and reliable way to implement them.

A Joni Mitchell song from the 1960s can teach us a lot about securing hybrid and multi-cloud environments.

The current state of regulation and the overwhelming burden it brings to most enterprises is a discussion worth having

The blame of security incidents may be shared—but the burden of response always falls on the security team. Here’s how to prepare for the...

Consolidating from an overly burdensome number of point solutions to an easier to manage platform-based approach brings with it a number of benefits.