3 pieces by Claire Donnelly.
Roadmaps get funded when they connect specific work to specific risks the business recognizes, in an order that makes sense. A practical structure for building one from the evidence you already have.
Third-party involvement in breaches doubled. Ransomware showed up in more breaches even as fewer victims paid. Edge devices became a fifth of exploitation targets. What each shift should change in next year’s plan.
The largest theft in cryptocurrency history didn’t break the exchange’s cold-wallet controls. It changed what the signers saw. The lessons apply to any organization that approves high-value actions through a vendor’s interface.