About Chris Matthews
After twenty-five years in cybersecurity I've seen a lot, and I write about the parts that never make it onto the trust page — clear-eyed, practical and occasionally uncomfortable.
After twenty-five years in cybersecurity I've seen a lot, and I write about the parts that never make it onto the trust page — clear-eyed, practical and occasionally uncomfortable. Some people say I saved their career. Read on and decide for yourself.
I've led security for large organisations, sat across the table from boards and auditors, and watched good people make very human mistakes. Somewhere along the way I became the person people called when they wanted the honest answer, not the slide deck.
What makes my work different?
- Security is a human story. Breach after breach starts with a person having a bad day, not a piece of technology failing.
- Incentives drive behaviour. People do what the system around them rewards. Most security problems are also misaligned incentive problems.
- Compliance is not security. A check box tells you nothing about whether the organisation is actually protected.
- Honest beats reassuring. The most useful answer is usually the uncomfortable one. I give it, and I expect it in return.
- Everyone gets it wrong. Including me. Twenty-five years of watching good people make very human mistakes — and making a fair few of my own — is where the writing comes from.
That message has found millions of impressions through social media and thousands of newsletter readers who want the honest answer rather than the reassuring one.
Where to start
The best place to start is my newsletter, Winging It. It lands in your inbox with the honest side of cybersecurity — no noise, no sales pitch.
Your information is protected and I never spam, ever. You can view my privacy policy here.
You can also read about my book, work with me, or say hello.