Attack Surface Unknown exists to make cybersecurity and digital risk more understandable, practical, and accessible. Through this platform, I examine emerging threats from multiple perspectives, challenge easy assumptions, and translate complex issues into lessons people can apply.
My goal is not to pretend to have every answer. It is to ask better questions, share what I learn, and help others navigate an attack surface that never stops changing.
I bring more than two decades of experience across technology risk, cyber and professional liability insurance, underwriting, and cyber risk engineering. My work has included advising large and complex organizations, evaluating both individual and portfolio-level risk, and connecting cybersecurity practices with real-world business and insurance outcomes.
My professional background is supported by certifications including the CISSP, Security+, and CySA+, but I believe experience and credentials are only part of the journey. I remain committed to hands-on learning, thoughtful analysis, and sharing knowledge with others as the industry continues to evolve.
