Independent thinking for high-consequence decisions.
Complete publication index of 13 peer-reviewed technical papers, board briefings, and architectural analyses on cybersecurity strategy, technology governance, detection engineering, and AI risk authored by Principal Burhani Mtengwa.
Executive & Technical Publications (13 Peer-Level Essays)
Rigorous architectural treatises, board briefings, and operational guides authored to assist C-suites, audit committees, and engineering leaders in navigating high-stakes technology decisions.
Beyond the Firewall: What the Revolut Breach Teaches Boards About Governance and Zero Trust
When attackers operate from verified government agency domains, standard perimeter defenses fail catastrophically. An architectural analysis of how compliance workflows were weaponized against digital banking giant Revolut—and the decisive governance mandates required to protect the enterprise balance sheet.
1. Why Security Architecture Fails Before Technology Does
Enterprise breaches frequently trace back to misaligned boundary definitions, identity sprawl, and fragmented ownership rather than defective software tools. Technology fails only when the architectural principles underneath it are ambiguous.
2. Why More Security Tools Do Not Mean Better Security
The average enterprise maintains 45 to 70 disparate security products. Tool proliferation increases architectural entropy, dilutes engineering focus, and generates alert fatigue while masking fundamental control deficiencies.
3. What a Modern MDR Should Actually Deliver (And Why Most Fall Short)
Many Managed Detection and Response (MDR) services are glorified alert-forwarding centers. True MDR requires active autonomous containment, transparent engineering runbooks, sovereign telemetry ownership, and enforceable response SLAs.
4. Detection Engineering: Turning Raw Telemetry into Defensible Decisions
Raw logs are a liability until refined into actionable, tested detection logic. Detection-as-Code (DaC), automated CI/CD validation, and signal-to-noise optimization transform telemetry pipelines into active defensive capabilities.
5. Building Enterprise-Grade Security Architecture Without a Massive SOC
Mid-market and agile enterprises cannot afford a 50-person Security Operations Center. A posture-driven, deterministic security architecture minimizes operational overhead while delivering superior containment resilience.
6. The Pragmatic Role of AI in Modern SecOps: Hype vs Production Reality
Artificial intelligence is neither an autonomous cyber savior nor a passing marketing fad. A realistic assessment of where machine learning delivers measurable operational ROI in security operations—and where it introduces unacceptable operational risk.
7. Generative AI in Cybersecurity: Architectural Safeguards for the Enterprise
As enterprises rapidly adopt Large Language Models (LLMs), threat vectors multiply. An architectural blueprint for mitigating prompt injection, model weight tampering, data poisoning, and unauthorized corporate intellectual property exfiltration.
8. Risk-Based Vulnerability Management: Beyond the CVSS Score Illusion
Fixing vulnerabilities solely based on Common Vulnerability Scoring System (CVSS) base scores is an expensive, ineffective treadmill. A risk-based methodology incorporating EPSS, CISA KEV, asset criticality, and attack path context focuses engineering resources on real business threats.
9. From Security Alerts to Business Risk: Communicating with the Board
Chief Information Security Officers routinely lose boardroom credibility by reporting technical operational minutiae. Quantitative risk modeling via the FAIR framework translates cyber threats into financial exposure, balance sheet resilience, and capital allocation clarity.
10. How to Build a Practical Security Roadmap That Executives Actually Fund
Most cybersecurity roadmaps end up as shelfware—overly ambitious, misaligned with commercial drivers, and disconnected from operational reality. A pragmatic three-horizon methodology for building a funded, executable 36-month enterprise security roadmap.
11. Building Enterprise Security with Open Source: Pragmatism Over Vendor Lock-In
Commercial cybersecurity marketing cultivates FUD around open-source security tools. In reality, mature open-source projects—Wazuh, Zeek, Suricata, Falco, and OpenTelemetry—power the world’s most resilient defensive architectures.
12. Technology Strategy Is Not a Shopping List: Architecture as a Business Enabler
Enterprise technology leadership frequently confuses vendor procurement catalogs with strategic architectural direction. A rigorous methodology for aligning technical capabilities directly with commercial expansion, customer retention, and balance-sheet durability.
Receive Future Architectural & Cyber Papers
Subscribe to receive new technical essays, threat intelligence advisories, and board risk briefings directly from Principal Burhani Mtengwa as they are released.
