Resources
Practical guides written from direct experience rather than skimmed documentation.
Akamai WAF and Bot Manager: from alert mode to enforcement
Why Akamai App & API Protector and Bot Manager stay in alert and monitor mode for years, and how to reach enforcement without blocking customers.
The 3-2-1 backup rule and the assumptions it no longer covers
What the 3-2-1 rule defends against, the three assumptions behind it that no longer hold, and why immutability survives an administrator compromise.
Alert fatigue and the move from thresholds to service level objectives
Why alerts stop being read, the test every alert must pass, and how SLIs, SLOs, error budgets and burn rate windows replace threshold noise.
Colocation or cloud: building a cost comparison that survives scrutiny
How to model owned hardware in colocation against public cloud over three to five years: the unit of comparison, the missing line items, the breakeven.
Disaster recovery planning: the parts that are not backup
Per-system recovery objectives, the dependencies that break failover tests, what warm and pilot light really cost, and who may declare a disaster.
Dormant accounts: why offboarding keeps failing
Why leaver processes miss systems, why movers are worse than leavers, and how to build joiner, mover and leaver flows that do not depend on memory.
NIS2 scope, and how the requirements reach companies outside it
Who NIS2 covers, what the two entity tiers change, and how the same requirements arrive contractually at suppliers who are not in scope themselves.
NIS2 reaches suppliers outside the EU, and usually through a contract
How NIS2 obligations arrive at companies that are not in scope, why in-scope customers push them down, and what to prepare before the questionnaire lands.
Redundant internet connectivity, and what actually counts as redundant
Why two circuits from one provider share a failure domain, how to verify a path diversity claim, and when BGP multi-homing is not worth the overhead.
Evaluating the alternatives to VMware without assuming migration wins
What Broadcom changed commercially, what each candidate platform is genuinely good and bad at, and the dependencies that only surface during planning.