Updates on what I'm building, working through, and thinking about - product design, service design, and side projects.
Why I scaffolded the shape of an entire GRC platform in the first 48 hours - which decisions I deliberately over-built, which I skipped, and the day I mistook empty folders for progress.
Read post →My first schema let an incident belong to one risk category. Then a nineteen-minute outage turned out to be a Technology, an Operational, and a Regulatory problem all at once. Why the register had to become a graph.
Read post →Five categories, three levels, and a code that never changes even when the label does. The taxonomy decision everything else in the register depends on.
Read post →Every quarter someone asks "what's our biggest risk right now?" and answering it means opening five different tools. First post in a build-in-public series on the GRC platform built to close that gap.
Read post →