October 2026 | Donovan Cybersecurity

Three-phase diagram of the first ninety days of a security program. Days one to thirty: find out what you have, covering assets, identity, sensitive data and obligations already promised. Days thirty-one to sixty: close what is open, covering multifactor authentication, individually assigned administrator accounts, a restore you have performed and patching with a deadline. Days sixty-one to ninety: make it durable. A footnote lists work deliberately deferred.

The First Ninety Days of a Security Program, Starting From Nothing

October 26, 2026 Donovan Kelley

Sequence matters more than completeness. What to inventory in the first month, which four doors to close in the second, how to make it durable in the third, and what to deliberately leave for next year.

Continue Reading →

Comparison table of a personal AI account against an enterprise tenant across four rows: whether your input stays out of model training, whether you can state retention and data location, whether access ends when the employee does, and whether the tool learns your business from your own documents. The enterprise tenant answers yes to all four.

Your People Are Already Using AI. The Only Question Is Whose.

October 12, 2026 Donovan Kelley

A policy that bans AI only changes where people use it. What actually differs between a personal account and an enterprise one, the four decisions a leadership team owns, and the one-page policy that holds.

Continue Reading →