Insights & Resources

Sharper thinking on cybersecurity, governance & risk.

Strategic perspectives, frameworks, and field-tested playbooks from Nick Shevelyov — former CSO of Silicon Valley Bank — and the vCSO.ai team. Looking for evergreen reference material? Browse our cybersecurity guides.

Latest

Risk Management

What Risk Management Consulting Actually Looks Like

Risk management consulting should change how you make decisions — not produce a binder. Here's what an operator-led engagement actually delivers.

Nick Shevelyov May 15, 2026
Read article

Security strategy in your inbox

One concise email per month. Board-level insights, no vendor pitches.

All articles

Security Governance

Compliance Gap Analysis: What Most Assessments Miss

Product Advisory

How to Start a Cybersecurity Startup in 2026

M&A Security

Cyber Finding That Almost Killed a $400M Deal

Risk Quantification

How to Get the CFO to Fund Cybersecurity

Security Leadership

Interim CISO: M&A and Pre-IPO Cybersecurity Advantage

Security Leadership

CISO as a Service: What Boards Need to Know

Security Leadership

Fractional CISO vs Full-Time CISO: Cost Compared

Security Leadership

What Is a Virtual CISO? Why vCISO Services Win

Regulatory & Compliance

AI Regulation Fragmentation: Building Compliance

Security Leadership

Change Management Governance: Reducing Outage Risk

Risk Quantification

Data Security for AI: Know Your Data Is a Board Mandate

Threat Landscape

Misconfigurations Beat Zero Days: A Security Playbook

Regulatory & Compliance

SEC Disclosure & Reg S-P: Becoming Disclosure Ready

Security Leadership

How to Build an Appropriate Digital Defense Team

Threat Landscape

How to Protect Your Company's Digital Assets 24/7

Threat Landscape

Ransomware Response: Where You're Not Looking Matters

Security Leadership

Invert Security Models: Empower Users to Triage

Threat Landscape

Cyber Typhoon: Data Security in US-China Tensions

Security Leadership

Pre-Mortems: Begin with a Failed End in Mind

Regulatory & Compliance

SEC Proposed Cybersecurity Rulings: Key Takeaways
Talk to us Tell us your needs →