At the time of writing this, I've written four security books that have sold globally.

​

• The Problem of Security

• The Superior Security Practitioner - A competency framework for security practitioners.

• Real Security Management™ - A new philosophy of value-led organisational protection.

• The Complete Bitter Pill

…and there are two more security books on the way. These are all available from my website. I refuse to sell through Amazon on ethical grounds, even though it’d increase my reach. Principles matter.

​

Here are some of the ideas/concepts that I have contributed to the cause of security management thinking. 

The 2 Great Contexts of Security Practice™
The 3 Levels of Security Contribution™
8 Security Virtues™
The Protective Focus Prism™
NSE²C™ (An evidence-based model for demonstrating organisational protective value)
Dr D's 4 D's™
The Event Response Cycle™
Security Relativity™
The Real Security Management Model™
Real Security Management™
The Spectrum of Security™

There’s a long list of people who have tried to rip off my thinking and pass it off as theirs…but none are able to explain it properly. Many of the people who follow some of them will applaud them while they attack me for saying the same things. Whatever.

I encourage people to consider and challenge what I say, once they have understood it. There isn’t another security thinker out here who says the same.  I want you to think for yourself, not ‘believe’. I’m not saying I am right, but I AM saying the rest of the industry is getting it wrong. Rip off their shit, if you must.

I don’t consider myself an industry leader, and don’t call myself one. Others have. I DO have a vision for the industry and wider security practice, which might be considered an essential part of leadership.

In Real Security Management™, I stated this goal…

‘I truly believe that serious security practitioners deserve a rewarding career where their contribution is valued.’

Despite this, I became an industry hate figure because I made a stand against industry weakness, stupidity, dishonesty and corruption. There are Reddit threads dedicated to slandering and libelling me, proving my point about the industry and the people we have allowed into it. I operate at the doctoral level (level 8), meaning that I create new knowledge. That means that anyone with a level 2 education might struggle to appreciate what I am saying. 

Security practitioners are being taught the wrong things, in the wrong ways, for the wrong reasons…and all that holds them back. When I say this, it’s considered a personal attack. Security practitioners will never achieve what I just said if they insist on clinging to stupidity, dishonesty and bad thinking. The industry IS in crisis…and yet I’M the bad guy. Fine. So be it.

For 44 weeks, I posted polls on LinkedIn for ‘security leaders’ to assess their understanding, and every week, roughly 90-95% got basic concepts wrong. Despite this, they refused to learn. I then ran a highly offensive newsletter - The Bitter Pill - explaining the right answers and slapping the thinking that chose the wrong ones. I compiled all the newsletters into one of the books for the people who love a bit of brutal snark while they learn.

All this burned me out, frankly. The brand became toxic, and so did I. I closed Real Security Doctor Limited, fired all my clients and decided to focus on coaching. And I really thought I could. 

But…I still have a valuable contribution to make for the right people, because I still believe in serious security practitioners. Quitting the industry would be cowardice, and the decent people still need my help.

So, for better or worse, I’m back. I’m going to try to do things differently this time.

My tasks.
To teach.
To guide.
To help.
To challenge.

Your tasks, if you choose them.
To listen.
To think.
To question.
To act.

Our shared tasks.
Leading positive change for better outcomes.

I am not here to judge, and I don’t need anyone’s approval or permission. I care nothing for badges or big job titles. I am not here to argue with internet idiots with a Google-level education who think AI is a good idea and who think the CIA triad is anything to do with security (Nope, and I don’t care which idiotic Government body says it is). I’m not interested in an echo chamber. I am interested in people willing to think, challenge and grow themselves and set a positive example in the industry. But I still won’t teach for free. Serious people invest in themselves.

Oh, and fuck AI and the idiots who use it.

For a greater appreciation of who I am and what I am about, I wrote a free ebook about my journey to where I currently am, called A Swan Dive in the Shallow End. It’s a cautionary tale about choosing security as a career. It’s available right below this section.

If you’re still here and support my goal - stick around, make up your own mind, and maybe we’ll talk. My best customers stalked me for over 6 months before booking a conversation. I’m not in any hurry, and nor should you be.