Why I am starting this blog

For eleven years I mostly wrote for steering committees: architecture files, audit reports, remediation plans. Useful documents, read by a few people, then filed away.

This blog is for something else. I will write down what the field teaches me, in a form that others can reuse.

What you will find here

• Lessons from security operations: what works in a SOC, what wears it out, what automation really changes.
• Practical notes on privileged access, data protection and infrastructure hardening.
• Thoughts on governance: how a standard becomes a practice, and not just a certificate on the wall.
• A view on digital sovereignty and on artificial intelligence applied to cyber defence, seen from Morocco and Africa.

What you will not find here

No client name, and no detail that would let you recognise one. Discretion is part of the job, and it does not end when an engagement does. Examples will be anonymised, sometimes recomposed, always faithful to what actually happened.

You will not find promises either. Perfect security does not exist. What exists are organisations that detect fast, decide well and learn from every incident. Those are the ones I want to write about.

An invitation

If an article makes you react, write to me or come and discuss it on LinkedIn. The best topics often come from a question someone else asked.