Textos ocasionales sobre infraestructura, operaciones y las decisiones que hay detrás. Se publican cuando hay algo que decir, no para llenar un calendario.
Removing local administrator rights is one of the highest-value security changes available and one of the most frequently abandoned. The projects that fail almost always fail the same way, and it is not a technical problem.
Adam Leveille, CEO & Principal Consultant
Leer másThe published averages are enormous and nearly useless, because they average across organizations nothing like yours. Here is how to calculate a figure for your own business that will survive contact with a finance director.
Adam Leveille, CEO & Principal Consultant
Leer másThe practice is usually explained by software companies, to software companies, with examples from software companies. The underlying idea is more broadly useful than that — and adopting it does not require becoming a development shop.
Adam Leveille, CEO & Principal Consultant
Leer másA marketing site is usually the least critical system an organization runs and the most frequently compromised. That combination — low attention, high exposure — is exactly what makes it the entry point.
Adam Leveille, CEO & Principal Consultant
Leer másMoving to a major cloud platform transfers a great deal of operational risk to the provider. It does not transfer all of it, and the part that stays with you is not the part most organizations assume.
Adam Leveille, CEO & Principal Consultant
Leer másThe commercial terms in an MSP contract are usually straightforward. The operational terms — scope boundaries, exclusions, data ownership and exit — decide whether the relationship works. Here is what to read carefully and what to negotiate.
Adam Leveille, CEO & Principal Consultant
Leer másMulti-factor authentication is the highest-value security control most organizations can deploy. It is also routinely deployed in a form that a competent attacker walks straight through. The difference is worth understanding before you tick the box.
Adam Leveille, CEO & Principal Consultant
Leer másThe vulnerabilities used against mid-sized organizations are rarely novel. They are usually months old, publicly catalogd, and patched by the vendor before the attack. Understanding why the patch did not get applied is more useful than understanding the vulnerability.
Adam Leveille, CEO & Principal Consultant
Leer másAlmost every organization we assess has backups. A much smaller number have ever restored one. The gap between those two facts is where most of the damage in a serious incident actually happens.
Adam Leveille, CEO & Principal Consultant
Leer másAlmost every provider advertises round-the-clock support. Far fewer will tell you who is awake, what they are allowed to do at 3am, and what happens when the answer is "nobody, until Monday". Here is how to read the claim.
Adam Leveille, CEO & Principal Consultant
Leer másMid-market companies lose enterprise deals at the security questionnaire, usually over things that were cheap to fix a year earlier. What reviewers really check, which answers end a deal, and how to be ready before the questionnaire arrives.
Adam Leveille, CEO & Principal Consultant
Leer másMost monitoring degrades into noise within a year. A full account of how we decide what wakes a person, what raises a ticket, what is merely recorded — and the database constraint that stops one flapping disk producing forty tickets overnight.
Caleb Gay, DevOps Consultant
Leer másA complete account of how we move a live system onto new infrastructure: what we check before we start, the order operations have to happen in, the failure modes that cost people their weekend, and the one step we will not automate.
Adam Leveille, CEO & Principal Consultant
Leer más
Mantener en línea una redacción diaria ante un tráfico impredecible
Leer másUna conversación de alcance con un ingeniero sénior. Le diremos qué cambiaríamos, cuánto costaría y si somos la firma adecuada para ello.