// VAUGHN CYBER GROUP // INSIGHTS
Cybersecurity strategy, AI risk, and security leadership from Lora Vaughn.
Everyone argues about where the CISO should report. That's the wrong argument. The real fix is a written mandate around the budget you'll have to challenge, and it doesn't require a new box on the...
→ read on loravaughn.comThe wiring that makes me lose my keys is the same wiring that goes calm and fast when everything is on fire. What twenty years in security taught me about working with my brain instead of against it.
→ read on loravaughn.comBusiness email compromise still outearns ransomware every year, and it beats banks that have EDR, MFA, and a clean exam. The control that stops it is a process, not a product, and most institutions...
→ read on loravaughn.comEveryone agrees the CISO role is accountable for more than it controls. Almost nobody names the mechanism. Here's what actually has to change.
→ read on loravaughn.comSecurity leadership rewards speed. The calls I am proudest of during an active incident were the ones I forced myself to slow down on. That is a trained discipline, not a personality trait, and most...
→ read on loravaughn.comSR Bancorp's breach came through the firm hired to audit its controls. Most vendor risk programs never ask who has access to the data behind the audit itself.
→ read on loravaughn.comFor more writing and industry commentary, visit→ loravaughn.com/blog
LAST UPDATED: September 4, 2026 at 08:54 PM
// NEXT STEP
Let's talk about how I can help your business get secure without the bloat.