Field Notes No. 6 · September 10, 2026 · 12 min read
Who Else Has the Keys? Managing Vendor and MSP Access in a Small Organization
Keep ownership, visibility, and a practical exit path while outside experts manage important technology.
Read “Who Else Has the Keys?” →
Field Notes No. 5 · August 26, 2026 · 12 min read
The Account Recovery Trap: Can You Regain Control When Your Primary Email Is Gone?
Map account dependencies, remove circular recovery paths, and build independent ways back into the systems that matter.
Read “The Account Recovery Trap” →
Field Notes No. 4 · August 16, 2026 · 11 min read
When the Internet Goes Down: Cyber Resilience for Small and Rural Organizations
Prepare for internet, cloud-service, and authentication outages with practical offline procedures built around the infrastructure you actually have.
Read “When the Internet Goes Down” →
Field Notes No. 3 · August 6, 2026 · 10 min read
Cybersecurity Is a Business Process, Not an IT Project
Clear ownership, repeatable routines, useful documentation, and tested recovery create security that lasts long after a product is installed.
Read “Cybersecurity Is a Business Process” →
Field Notes No. 2 · July 27, 2026 · 11 min read
What Does ‘Good Enough’ Cybersecurity Look Like for a Small Organization?
Seven practical questions help small organizations distinguish sustainable, defensible security from corner-cutting and build a baseline they can test and improve.
Read “What Does ‘Good Enough’ Cybersecurity Look Like?” →
Field Notes No. 1 · July 20, 2026 · 9 min read
Built for the Real World: Practical Cybersecurity for Small Businesses, Rural Organizations, and Individuals
A realistic security baseline and the Iron Dillo GRIT model for organizations that need meaningful improvement, not an enterprise program they cannot afford or maintain.
Read “Built for the Real World” →