I’m Pete Simon. I work in cyber security consulting, leading programmes across penetration testing, assurance and specialist delivery for enterprise clients. I write about cyber security, secure AI adoption and the delivery work that sits between technical detail, governance and real organisational pressure. Most of my writing is for security leaders, programme owners and technical teams who are accountable for outcomes. The focus is practical: clearer decisions, honest trade-offs, better questions and delivery that holds up when the work gets difficult. You’ll find posts on threat-led testing, governance, stakeholder communication and the reality of getting security work done inside live organisations. Some of it is technical. Some of it is about judgement. Most of it sits somewhere in the middle! I’m not interested in borrowed certainty or vendor-shaped cyber writing that sounds impressive but gives people nothing useful to take away. I’d rather write plainly, call the trade-off honestly and leave people with something they can act on.