Blog
Notes on security, controls, and the transition from MSP engineering to GRC and IT audit. Short posts, no fluff.
Sep 30, 2026
Why I'm pursuing the CISA
Nine years of 2 a.m. pages, and the assessment that changed my trajectory.
Sep 28, 2026
What building Before U Vote taught me
Neutral civic tech is harder than it looks — mostly for non-technical reasons.
Sep 24, 2026
Nine years of break-fix taught me how controls fail in real life
The gap between the policy binder and the server room is where auditors earn their keep.