Foundations

A library with floor-to-ceiling shelves. Several people are at tables with books and notebooks open. Nobody is teaching. One person makes notes in the margin of a page. Another has drawn a diagram connecting several open books. The room is quiet and purposeful.

The work in this section does not belong to security specifically. It belongs to the problem of how organisations change, learn, and solve the right problems rather than just the obvious ones. Gerald Weinberg developed these ideas across decades of work with software teams and organisations under pressure. Virginia Satir developed hers across decades of work with families and then with groups of all kinds. The adult Montessori framing draws these threads together into a way of designing environments for learning.

None of these are frameworks in the certification sense. They are ways of seeing: lenses that make certain things visible that conventional security practice tends to ignore or treat as soft concerns. The political layer of a security problem. The communication patterns that prevent honest reporting. The model that has been silently wrong for eighteen months and is producing the same class of incident on a quarterly cycle.

Applied to security, these approaches change what you look at, what questions you ask, and what you consider a finding.

If the technical work is sound but the outcomes are not improving, the answer is usually here.