Resources

Practical writing on security and compliance

No fear-mongering, no filler — just straightforward guidance drawn from real engagements. Matt also writes longer-form pieces on Medium.

Latest

The Security Questionnaire Has 340 Questions. Here's How We Handle It.

A due date, a spreadsheet with conditional formatting, and 340 rows standing between your team and a closed deal. Here's the actual process, not the theory.

July 14, 20266 min read

Read the article

GRCCompliance Automation

Buying a GRC Platform Without Someone to Run It Is Like Buying a Gym Membership Without a Trainer

The membership gets you through the door. It doesn't lift the weights. Here's what actually happens to the 40 failing controls nobody owns.

June 9, 2026·6 min read

SOC 2Compliance

SOC 2 Is Not a Certification. It's an Attestation. Here's Why That Matters.

Your prospect's security team knows the difference. Call it a certification on a sales call and you've just told them you don't understand your own report.

May 4, 2026·6 min read

GRCCompliance Automation

Choosing a GRC Platform: What Actually Matters

We partner with the major GRC platforms and help you pick the one that fits your environment. Here's what we look at when we make that call.

April 18, 2026·6 min read

Fractional CISORisk Management

Your CTO Shouldn't Be Implementing SOC 2 Controls Between Product Releases

Every hour your CTO spends configuring MFA policies and writing incident response docs is an hour they're not spending on the product roadmap. That's the real cost of not having security leadership, and it's bigger than people think.

March 22, 2026·5 min read

More long-form writing on Medium

Matt publishes longer, deeper-dive pieces on cybersecurity and compliance for founders and practitioners on Medium.

Visit the Medium profile

Ready when you are

Stop checking boxes. Start getting it done.

The audit's in six weeks. The questionnaire's due Friday. Let's talk Tuesday. Book a free consultation and we'll tell you straight what it takes to get your program built, certified, and operating.

Book a Free Consultation View our services