Crisis and Incident Response - Protection in shifting domains

Protection in shifting domains

Sign in Subscribe

Crisis and Incident Response

Crisis response is what happens when prevention fails or time compresses. This hub covers decision-making under stress, communication, coordination, containment, and recovery. It focuses on practical response logic, from first minutes to post-incident learning, and how narrative and information flow shape outcomes.

The Insider Was the Opening Move

Close Protection

The Insider Was the Opening Move

An insider grievance becomes a leak. The leak becomes constructed disinformation. The disinformation becomes a geopolitical amplification opportunity, then a legal crisis with an extortion edge. The attack was coupled. The response was not. That asymmetry is the whole lesson.

Intelligence as a Function: Building the OSINT Capability Your Team Is Missing

Paid-members only

Close Protection

Intelligence as a Function: Building the OSINT Capability Your Team Is Missing

He was not a hacker. He had no classified access, no government tools, no intelligence community background. What he had was method. He was meticulous, analytically patient, and genuinely curious about how information connects.

Before the Davos Noise

Before the Davos Noise

Before Davos turns risk into slogans, I read the WEF Global Risks Report 2026 through a hybrid lens: economic leverage, information manipulation, cyber disruption, and political pressure. These channels couple fast, shaping continuity, travel, and protection decisions.

Protection in the hybrid zone

Gray Zone Featured

Protection in the hybrid zone

For me, hybrid is where state and non-state actors intersect, often with deniability, so that “ordinary” crime, activism or online noise can serve strategic aims.