Notes · a series on what to decide
What to decide
Eight pieces for the person who answers for units they don't run. One action a week that is theirs, not their security team's.
15 Sep 26
Your vendor goes down on the day. Who do you call?
Half of what protects an office that doesn't run its own systems is a name and a number written down before you need it.
22 Sep 26
A risk accepted without your signature
Somewhere in the offices you answer for, the email still runs on a machine nobody asks about.
29 Sep 26
The first reader of your website is an AI. It got my company wrong.
The thing reading your website isn't a person. Its answer comes before the first link, and most people stop there.
8 Oct 26
Your vendor has a vendor. Here is the question to send.
The question your most important vendor has never been asked, and how to put it in writing.
15 Oct 26
A new hire gets an interview. An AI assistant gets a login.
What an AI assistant should be allowed to know about you and your organization, and why that decision is yours.
29 Oct 26
Nobody hangs up on their boss.
Cloning a voice is cheap now, and the people who answer your phones can't hear the difference. What protects them is a rule you sign before the call comes.