Blog

Practical articles on security, deployment, and evidence.

A refined open technical journal with blank pale pages beside a glass archival document folder
Blog

Dates identify publication on LinkedIn or a future scheduled or planned LinkedIn release. All full articles are available to read now.

Personal perspectives

Philip Lieberman

14 staggered releases
A beautiful boxed security toolkit arrives on a workbench. Every tool raises a little hand and looks toward an empty operator chair. A shift schedule on the wall is blank. Caption: Excellent tools. Who's on duty?

Scheduled on LinkedIn

Bought the Kit. Who Runs It?

A long feature list can hide an expensive question: who does the remaining work? Learn what a capability does, assists with, or records.

Corporate articles

Analog Informatics Corporation

20 staggered releases
A padlock wears a graduation cap while keys hang outside an open cabinet.

Scheduled on LinkedIn

Trained on the Wrong Policy?

A training completion record can be perfectly accurate and still answer the wrong question. Which version of the policy did that person actually acknowledge?

A repaired padlock with a bandage is inspected beside a server and before-and-after evidence.

Scheduled on LinkedIn

Fixed? Prove It.

A repair command returned success. The security setting is still wrong. Close the ticket now and the next person inherits a problem marked FIXED.

Three increasingly equipped nesting software tool chests sit beside a cart overloaded with disconnected gadgets.

Scheduled on LinkedIn

Bought the Kit. Who Runs It?

Buying a CMMC software kit doesn't fill in the operating roster. Somebody still has to own configuration, access decisions, training follow-up, and review of the evidence.

A locked cloud mailbox sits beside a model office whose remaining doors and operating processes need attention.

Scheduled on LinkedIn

Tenant Secured. Server Exposed?

A well-protected tenant can still sit beside a poorly controlled server. Identity controls at one layer don't explain every privileged session or configuration change elsewhere.

A green dashboard checkmark on a curtain conceals disorganized evidence papers.

Scheduled on LinkedIn

More Evidence. Slower Audit.

More screenshots can mean a slower audit. If the reviewer can't connect them to the request, system, and time period, somebody still has to explain the pile.

A temporary exception has grown roots around a server door while its review calendar gathers cobwebs.

Scheduled on LinkedIn

Temporary Risk. Permanent Exposure.

A temporary security exception shouldn't outlive the person who approved it. Yet a workaround can become part of the architecture simply because nobody revisits it.

A repaired server wears a bow tie beside an empty evidence binder and a camera pointed away.

Scheduled on LinkedIn

Resolved. No Record.

‘Resolved’ is a lousy handoff when nobody can tell what changed. The customer has a closed ticket. The MSP has moved on. Now an assessor wants the record.

A continuous recording instrument catches a server change while a snapshot camera sleeps beside an outdated framed picture.

Scheduled on LinkedIn

Compliant Yesterday. Exposed Today.

A clean assessment snapshot can't tell you what changed the following week. A new privileged account, a configuration exception, or an overdue review can change the picture quickly.

See It on Your Use Case

A live demo of privileged access, compliance evidence, and deployment options for your environment.

Subscribe to Articles

Receive new articles in your feed reader.