After years in cybersecurity, I realised how much of our industry’s focus goes to tools and exploits — and how rarely we step back to strengthen the principles behind them.

That insight led to Hacking Cybersecurity Principles, which launches today. It revisits the fundamentals — confidentiality, integrity, availability, governance, detection, response, and recovery — with a focus on how they guide modern operations and incident response.

If you’ve seen how quickly fundamentals get sidelined in favour of tactics, I’d be interested in your thoughts:

Which principle do you think we neglect most in security practice?

(Details here if you’re curious: www.cyops.com.au)