Seatbelts, Not Force Fields
A seatbelt does not prevent all accidents. It accepts the existence of accidents as a basic fact of life. Its job is to reduce harm when something goes wrong.
Seatbelts, Not Force Fields uses this distinction to reframe how organizations think about security. Instead of promising certainty or total prevention, it argues for security as risk management and harm reduction—planning for failure, reducing impact, and recovering with less damage when systems inevitably break.
What This Book Is
This book challenges the myths that drive security theater: compliance as protection, training as a substitute for design, and guarantees as evidence of control.
It explains why leaders who demand certainty train their organizations to overpromise—and why that overconfidence ultimately erodes trust when reality intervenes. Mature security, the book argues, starts by accepting residual risk and speaking honestly about what systems can and cannot protect against.
What This Book Provides
Seatbelts, Not Force Fields focuses on where security actually breaks and what makes organizations safer in practice, including:
-
Threat modeling as context, not diagrams
-
Usability as a security control
-
Identity and authentication as distinct problems
-
Detection, response, and recovery over prevention theater
-
Trust as the most fragile—and important—security asset
The emphasis is not on tools or checklists, but on decision‑making, tradeoffs, and systems that survive contact with real life.
Who This Book Is For
This book is written for leaders, practitioners, and non‑specialists who are expected to make security decisions without pretending that risk can be eliminated.
It is especially relevant for organizations navigating modern security challenges where usability, human behavior, and operational reality matter as much as technical controls.
Relationship to Advisory Work
Seatbelts, Not Force Fields is a foundational work. It establishes the mindset and language required for honest security conversations—before governance frameworks, operating models, or formal controls can be effective.
It pairs naturally with The Capability Debt, which addresses what happens when organizations scale decisions and consequences without building the underlying capability to govern them.
Seatbelts, Not Force Fields is available in print and digital formats.
→ Amazon