Explore the ideas, methods, and perspectives collected here. Each topic offers a different starting point for reading, reflection, and discussion.
Discipline Diamond Methodology
See Strengths. Expose Gaps. Set Priorities.
My methodology for assessing information security strengths and weaknesses across an organization and presenting the results visually. Introductory writings explain the approach; detailed assessment tools support client engagements.
Discipline Diamond Reference Materials
- Read: Understanding the Discipline Diamond Methodology
- View the Discipline Diamond overview infographic
- View the Discipline Diamond facets infographic
Entity Management
One Enterprise. Many Entities. Clear Accountability.
Drawing on firsthand experience managing information security from multiple parent companies, with more than 19 subsidiaries in 13 countries, this preview explores how corporate parents and subsidiaries can build effective working relationships. It examines governance, decision rights, common standards, communication, shared capabilities, and measurable accountability—balancing enterprise oversight with local autonomy.
Entity Management Reference Materials
Information Security Governance – The PSGI Methodology
From Enterprise Policy to Operational Practice — Consistent, Traceable, and Accountable.
The PSGI Methodology provides a structured approach to information security governance across complex enterprises and their subsidiaries. It establishes a five-level hierarchy of governance requirements, supported by an overarching Information Security Management System (ISMS). The methodology incorporates a PSGI Matrix to provide visibility into Policies, Standards, Governance Instruments, and Procedures, including requirements traceability, organizational applicability, accountability, and ongoing governance maintenance.
PSGI Reference Materials
- Read: A Structured Approach to Information Security Governance
- View: PSGI Governance Triangle
- View and Download: PSGI Matrix
- Read: Hierarchical Requirements Traceability
- Read and Download: PSGI Implementation Guide
- View and Download: PSGI Governance Methodology Presentation
Theology & Leadership
Reflect on Belief. Consider Responsibility. Lead With Purpose.
A planned collection exploring theology and leadership together, with room for reflection on faith, judgment, responsibility, and relationships. Introductory writings will be added as the collection develops.
Cyber Trade School
Build Practical Skills. Demonstrate Readiness.
A proposed approach to preparing people for cybersecurity work through curriculum, practical learning, and testing. This section will introduce the proposal and invite discussion as supporting materials become available.
Managed Tools Services
Put Tools in Context. Connect Them to Program Needs.
A planned introduction to managed tools services available through Cochran. Service descriptions and engagement details will be added as they are prepared for publication.