DEEPMOVE
The why behind the move.
Long-form thinking on the week's action — context, nuance, and what actually matters.
DEEPMOVE
The deep context behind every Monday.
Each Monday Move is a concrete action. DeepMove is the practitioner perspective on why it matters — and what to watch for when you do it.
The Certainty Gap
The fix takes hours, proving nothing came of it takes days, and the difference is a debt most teams don't know they carry.
Read the DeepMove →Where Restricted Data Goes to Wait
Restricted data usually gets exposed by someone who parked it without recognizing what it was, and then it waits.
Read the DeepMove →Hello, practitioner. I want to play a game.
A Saw-style Halloween story where every trap is built from a real number, and the voice on the tapes sounds awfully familiar.
Read the DeepMove →Available for Exploit
A critical flaw on a public system is an availability event, and most of us still run it on a ticket clock.
Read the DeepMove →The whole room raised a hand.
Eleven section leaders told one story in an hour, and the best question came from one team asking another about work it had been living beside.
Read the DeepMove →We Were Measuring Context
Years of SLAs taught security teams to measure whether they kept a promise, and almost nobody asked what the business bought.
Read the DeepMove →Each team brought the what.
We planned the network as one team, and the endpoint agents came off while spend dropped and coverage went up.
Read the DeepMove →One person, one conversation.
The most useful thing a supplier did all week was hand me to somebody else, with the whole conversation attached.
Read the DeepMove →The coworker with no start date.
Fifteen years of identity lifecycle assumed a human being, and the fastest growing category of actor in your environment has never had one.
Read the DeepMove →The seam was always there.
AI did not create the gap between two teams. It removed every reason the gap used to be affordable.
Read the DeepMove →The day that did not end
Twenty-five years on, the people who ran toward it are still dying, and the one lesson we managed to write into law is running ninety days at a time.
Read the DeepMove →I stopped listening ten years ago.
Two judgments were running in that room at the same time, and the second one was aimed at the people who got it right.
Read the DeepMove →The story would not finish.
Every artifact the program had ever produced sat on the desk, all of it accurate, and the sentences that had to connect them refused to close.
Read the DeepMove →The postmortem had no findings.
Every control passed its own test, which is why nothing changed, and why the same chain is still armed in most programs reading this.
Read the DeepMove →Nothing happened, and the tool took credit.
Security tools get bought to prevent things, and prevented things leave no evidence. That's why the renewal always wins.
Read the DeepMove →The side door never moved.
The technology walking past procurement changes every few years. The gap it walks through hasn't changed once.
Read the DeepMove →Every copy is a receipt.
Storage kept outpacing intake and nobody could explain the gap. The answer was seven or eight deliberate copies of everything, plus a tail we never finished counting.
Read the DeepMove →The Key Three Teams Forgot They Shared
A routine rotation surfaced a dependency that had been invisible for two years, and it wasn't in the system anyone expected.
Read the DeepMove →The Sentence That Survives the Review
Most programs do not have a review problem. They have a conversion problem.
Read the DeepMove →Demand Doesn't Disappear. It Relocates.
When you block a tool people want, the demand does not vanish. It moves to the one channel you cannot see.
Read the DeepMove →Happy 250th Birthday - Two Uniforms, One Idea
On America's 250th, a career built on the idea worth celebrating.
Read the DeepMove →The Original Security Practitioners
The fathers who checked the locks, shredded the mail, and hung up on strangers weren't paranoid. They were running a security program before the field had a name.
Read the DeepMove →Why security teams keep buying what they already own
The industry trains teams to match products to risks. Nobody trains them to ask if the risk is already covered.
Read the DeepMove →The Number Nobody Tracks
Every SOC has a MTTR. Almost none of them know how long one investigation actually takes. Those are not the same measurement.
Read the DeepMove →The New On-Ramp
The on-ramp that built instinct is gone, and the teams that build a new one intentionally are the ones that will not find out the hard way.
Read the DeepMove →Leading Cybersecurity Teams in the AI Era
Leading security in the AI era isn't about the tools you buy, it's about the judgment, trust, and reporting culture you build.
Read the DeepMove →Open for Submissions
MondayMove is now open for submissions, and I want yours!
Read the DeepMove →Welcome to MondayMove!
After nearly 30 years of watching the same patterns repeat, I built something.
Read the DeepMove →