Field notes

Practical cybersecurity, clearly explained.

Useful guidance for small businesses, rural organizations, and individuals without fear-based selling or unnecessary complexity.

Latest article

Field Notes No. 7

· 10 min read

Shadow IT is often a visibility problem before it is an employee problem.

The Software You Don’t Know You’re Using: Shadow IT in Small Organizations

Find the tools people rely on, understand why they use them, and make deliberate decisions without driving activity underground.

Read “The Software You Don’t Know You’re Using”

Earlier field notes

Field Notes No. 6 · September 10, 2026 · 12 min read

Who Else Has the Keys? Managing Vendor and MSP Access in a Small Organization

Keep ownership, visibility, and a practical exit path while outside experts manage important technology.

Read “Who Else Has the Keys?”

Field Notes No. 5 · August 26, 2026 · 12 min read

The Account Recovery Trap: Can You Regain Control When Your Primary Email Is Gone?

Map account dependencies, remove circular recovery paths, and build independent ways back into the systems that matter.

Read “The Account Recovery Trap”

Field Notes No. 4 · August 16, 2026 · 11 min read

When the Internet Goes Down: Cyber Resilience for Small and Rural Organizations

Prepare for internet, cloud-service, and authentication outages with practical offline procedures built around the infrastructure you actually have.

Read “When the Internet Goes Down”

Field Notes No. 3 · August 6, 2026 · 10 min read

Cybersecurity Is a Business Process, Not an IT Project

Clear ownership, repeatable routines, useful documentation, and tested recovery create security that lasts long after a product is installed.

Read “Cybersecurity Is a Business Process”

Field Notes No. 2 · July 27, 2026 · 11 min read

What Does ‘Good Enough’ Cybersecurity Look Like for a Small Organization?

Seven practical questions help small organizations distinguish sustainable, defensible security from corner-cutting and build a baseline they can test and improve.

Read “What Does ‘Good Enough’ Cybersecurity Look Like?”

Field Notes No. 1 · July 20, 2026 · 9 min read

Built for the Real World: Practical Cybersecurity for Small Businesses, Rural Organizations, and Individuals

A realistic security baseline and the Iron Dillo GRIT model for organizations that need meaningful improvement, not an enterprise program they cannot afford or maintain.

Read “Built for the Real World”