Approaching three years at Gala Coral as CISO. The cumulative experience has been substantial; specific structural decisions about what comes next are emerging through the next several weeks.
This is a longer reflective post because the cumulative trajectory deserves treatment and specific subsequent decisions matter.
What three years has produced
The cumulative work at Gala Coral has been substantive across multiple dimensions.
Mature defensive infrastructure. The cumulative investment in defensive controls, monitoring, incident response, and operational discipline has produced infrastructure that absorbs substantial threat activity with bounded operational impact. The cumulative trajectory through the past three years has been positive.
Operational discipline at scale. Specific cumulative cumulative procedures, specific cumulative team development, specific cumulative cumulative engagement with regulatory and audit processes. The cumulative organisational maturity is meaningful.
Cross-organisation engagement. Specific cumulative engagement with peer CISOs, specific cumulative industry coordination, specific cumulative practitioner-network development. The cumulative external engagement complements the internal work.
Specific cumulative writing and conference engagement. The DDoS book, Infosec Europe 2008 presentation, specific cumulative subsequent talks and writing — all developed during the Gala Coral period.
The cumulative three years has been the most substantive period of my career to date. The cumulative experience supports specific subsequent decisions.
What I am thinking about
Specific cumulative thinking through the past several months has been about what comes next.
The cumulative defensive maturity at Gala Coral is now substantial. Specific cumulative subsequent work would be incremental rather than structural; specific cumulative cumulative role-specific learning has substantially completed.
The cumulative practitioner profile from the book and conference work is now substantive. Specific cumulative subsequent opportunities for independent work are emerging; specific cumulative cumulative network supports specific subsequent professional decisions.
The cumulative cumulative cumulative financial-crisis context introduces specific operational pressures. Specific cumulative cumulative cost discipline, specific cumulative cumulative cumulative role uncertainty, specific cumulative cumulative cumulative cumulative cumulative subsequent organisational changes — all may affect the cumulative role over the next several quarters.
The cumulative cumulative cumulative cumulative cumulative cumulative cumulative subsequent independent-practice option is operationally credible. Specific cumulative cumulative cumulative cumulative cumulative cumulative subsequent client base, specific cumulative cumulative cumulative cumulative cumulative cumulative cumulative subsequent operational rhythm, specific cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative subsequent professional autonomy — all are appealing.
The cumulative thinking is leading toward specific subsequent decisions. Specific timing remains to be determined.
What this means for the notebook
The weekly cadence continues regardless of role transitions. Specific cumulative subsequent posts will reflect what is professionally appropriate to share; specific cumulative subsequent decisions will be visible across the next several weeks.
The cumulative archive continues. Specific cumulative cumulative subsequent role transitions are documented when they occur; specific cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative cumulative subsequent operational reality will inform subsequent writing.
A specific note on the trajectory
For practitioners considering similar transitions: specific cumulative cumulative thinking about role changes deserves explicit time. The cumulative cumulative discipline of articulating one's options publicly is itself useful.
For my own continued discipline: the notebook will document the trajectory as decisions are made.
More in time.