The cases below are security decisions I structured and facilitated in industry, energy and defence, anonymised and added as they clear review. Each states the constraint, the alternative set aside, the cost and what changed. Some combine more than one engagement, and the decision itself is as it was taken. The methods beneath them are what those decisions draw on.
Portfolio
What I've done, and how.
Cases
Portfolio
Asset inventory before segmentation: a cyber programme across 40+ industrial sites
How an OT security programme across more than forty manufacturing sites put asset inventory and connected response ahead of new segmentation hardware and a separate response organisation. The price was leaving segmentation to site-by-site investment or risk acceptance, and the return was incident response in minutes instead of weeks.
Portfolio
A cyber insurance renewal that bought a policy that responds, not only a cheaper premium
How a renewal in a soft market spent a small part of the saving on a lower retention and a pre-approved response partner, what was set aside to do it, and the test that shows whether your own policy has ever been used.
Methods behind the decisions
Portfolio
Core ISMS Capability Model
Seven interdependent capabilities for building an ISMS that drives security decisions rather than merely satisfying an audit.
Portfolio
System Security Concepts
A 7-article series on implementing systematic security documentation within ISMS frameworks, from foundational concepts to practical implementation templates.