logo
Purple crossroads
Knowledge transfer and playbook development
  • Red tradecraft
  • Privacy greenhouse
  • Defence blues
  • Indigo observatory
  • Contact
Initializing search
    • The three foundations of Asimov
    • Threat modelling & preparation
    • Cloud security
    • Threat analysis of AI in security operations
    • Learned models: the calibration view
    • The administrative attack surface
    • Audits and assessments
    • Distribution networks
    • Notes in the margin
    • The thirteenth chair
    • Systems architecture
    • Planning and running engagements
    • Practice that sticks
    • Knowledge transfer and playbook development
      • Security knowledge does not transfer easily
      • Moving beyond manuals that nobody reads
      • Playbooks that actually work
      • Dashboards that actually get used
      • Workflows that get followed
    • Knowledge transfer and playbook development
      • Security knowledge does not transfer easily
      • Moving beyond manuals that nobody reads
      • Playbooks that actually work
      • Dashboards that actually get used
      • Workflows that get followed
    • Purple teaming
    • Social engineering and human defences
    • Incident response & crisis facilitation
    • Risk management & assessment
    • Business continuity and disaster recovery
    • Resilience as a practice
    • The pattern shop
    • The crucible
    • Purple Lantern Practice Ltd.
    • The Morporkian Civil Liberties Union (MCLU)

    Knowledge transfer and playbook development¶

    A stick figure is writing on a giant scroll labeled 'Incident Playbook'. Another stick figure is erasing a step and writing a better one. A third stick figure is adding a 'Post-Mortem Lesson' sticky note to the margin. The playbook is shown as a messy, evolving document, not a pristine book.

    Weaving security knowledge into how an organisation operates, so that what the team knows is not just stored in a document but usable at the moment it is needed.

    • Security knowledge does not transfer easily
    • Moving beyond manuals that nobody reads
    • Playbooks that actually work
    • Dashboards that actually get used
    • Workflows that get followed
    Let’s make one.

    Last updated: 4 July 2026

    2026-07-18 09:45
    © Copyright 2025, TyMyrddin.
    Created using Sphinx 7.2.6. and Sphinx-Immaterial

    Made with love by Ty Myrddin, 2026, with a forest garden fostered by /ut7