Field Note
July 2026
The opening ninety days of a security leader's tenure determine the rest of it. On treating the start as construction rather than maintenance, and building a function that does not depend on any one person.
Book Excerpt
July 2026
An excerpt from Book One of the Shadow Playbook series. Every threat the modern enterprise faces falls into one of five categories — cyber, physical, reputational, insider, and environmental — and the most damaging incidents involve all five at once.
Field Note
June 2026
The event perimeter used to be horizontal. Small commercial drones made it three-dimensional, serving as both a reconnaissance platform and a delivery vector. On bringing the airspace into the advance.
Doctrine
June 2026
Adversaries run blended cyber-physical campaigns; the enterprises that keep the two functions split leave the seam between them as the attack surface. The case for one security leader and one fused threat picture.
Field Note
May 2026
A walkthrough of the advance program for a multi-city stadium tour, from the first venue survey to the final after-action review. What the Advance Team carries when they cycle ahead of the principal, why the operations order is the most important document of the run, and how doctrine compounds across forty cities.
Book Excerpt
May 2026
An advance excerpt from Book Two of the Shadow Playbook series. The principal relationship is the most important variable in any close personal protection engagement. An honest treatment of the dynamics, the rhythms, and the lines that hold across the work.
Doctrine
April 2026
An exploration of the Picture pillar of the Shadow Doctrine. How the threat picture brief is built, what goes into it, who signs it, and why nothing else moves until the picture is set. Why generic threat assessments are worse than no assessment at all, and what a real one looks like.
Field Note
April 2026
On the practice of identifying hard rooms along every walking path, the doctrine behind primary, secondary, and alternate routes, and why the moment of greatest exposure is almost always the egress, not the arrival. A field note on the work that finishes after the show ends.
Field Note
March 2026
Most events deploy security personnel. Very few deploy a command structure. A field note on incident command discipline, span of control, unified command, and why the command layer is built before the first guest arrives, not after something changes.
Field Note
March 2026
Artist security and event security are treated as the same discipline by most providers. They are not. A field note on the threat profile, peak exposure moments, relational discipline, and touring fluency that separates talent security from general event security.
Field Note
February 2026
A short note on a phrase that recurs across the Shadow Doctrine. What it means to design a venue plan, what it means to build it, and what it means to staff it. Why all three verbs matter, why most providers stop at one of them, and what is lost when they do.
Doctrine
February 2026
Why event medical is not an afterthought. How medical posture is matched to event size and risk profile, how integration with on-site medical and EMS is built into the operations order, and why the team that has rehearsed mass casualty response is the team that never has to use it.