Guides
Plain-language cybersecurity guides.
These are the questions I am asked most often — after a talk, after a TV segment, or by a business owner who has just had a bad week. Written the way I teach it: no vendor pitch, no jargon, no assumed background.
ExplainerReadChecklistReadIncident responseReadAI securityRead
What a Penetration Test Actually Is
What you are buying, what you should get back, and how to tell a real test from an automated scan.
The San Diego Small Business Cybersecurity Checklist
The short list of things that actually reduce risk for a small business, in the order I would do them.
The First 24 Hours After a Breach
What to do, who to call, and the mistakes that reliably make everything worse.
AI Security for Small Business
Prompt injection, chatbots, and staff using AI tools at work — what matters, and what does not.
Something not covered here?
If there is a question you keep running into, tell me — it may become the next guide.