Insights and updates
from across the team.

Filter By:

Image created by Law.com
1 Mar 26

EPSD in Law.com- Beyond Liability: How Vague Breach Communications Harm Your Business (And Legal Position)

This article by EPSD’s Managing Partner, Nick Selby, EPSD Advisory Board member / Founder and CEO of Discernible Communications, Melanie Ensign, and Chief Data Strategy Officer at Abaxx Technologies, Inc., Michelle Finneran Dennedy, appeared in Law.com’s Expert Opinion section on 1 March 2026. Read the excerpt below, and please click through for the full text.

Read more
Nick Selby and Sarah Wells
23 Feb 26

Nick Selby and Sarah Wells - The Rush to Adopt AI: Business Risks & How to Get it Right

Sarah Wells, EPSD’s Lead Consultant for Engineering Effectiveness, and Nick Selby, EPSD’s founder and Managing Partner, explore why the current rush to adopt AI tools introduces significant business risks in this episode of GOTO Unscripted. They discuss how AI vendors deliberately blur security terminology to confuse buyers, how AI tools’ insatiable appetite for data creates enormous blast radii when breaches occur, and what organizations can do to adopt AI responsibly - from threat modeling and cross-disciplinary governance to minimum-permission principles and incident readiness.

Read more
Nicko Goncharoff and Nick Selby with the Velocity's Edge logo
8 Oct 25

Velocity's Edge Podcast S1E9 - Nick Selby on Factionalism

When leadership is struggling with organizational dysfunction that stems from resource constraints, they tend to see teams in conflict: product versus engineering, sales versus operations, etc. They might assume the solution involves coaching, restructuring reporting lines, adjusting compensation models, or hiring more diplomacy-minded managers. But as EPSD’s Nicko Goncharoff and Nick Selby have learned through years of organizational interventions, the biggest threat to mid-stage technology companies isn’t functional disagreement. It’s the personal resentment that calcifies when strategic pivots in the business force zero-sum resource allocation.

Read more
Dr. Pablo Breuer with the Velocity's Edge podcast logo
1 Oct 25

Velocity's Edge Podcast S1E8 - Dr. Pablo Breuer on CISO Leadership

Many organizations hire Chief Information Security Officers (CISOs) expecting them to be security experts who can implement controls and prevent breaches. But as Dr. Pablo Breuer learned through 22 years in Navy cyber operations and leadership roles spanning National Security Agency red teams to Fortune 50 financial firms, the fundamental challenge isn’t technical — it’s that most companies don’t understand what they actually need from a CISO in the first place.

Read more
image used by fast company to accompany nick selby article on tech debt
21 Aug 25

Nick Selby for Fast Company: Tech debt isn’t an ‘IT issue.’ It’s a business strategy

This article by EPSD’s Managing Partner, Nick Selby, appeared in Fast Company’s “Ask the Experts” section on 21 August 2025. Read the excerpt below, and please click through for the full text.

Read more
A photo of Huw Rogers with the Velocity's Edge Podcast logo
20 Aug 25

Velocity’s Edge Podcast S1E2 - Huw Rogers on Tech Debt

If you’re leading a profitable, cash-flow-positive business, you’ve probably watched technical debt pile up: those accumulated consequences of choosing quick fixes over well-designed, long-term solutions. If you’re not carefully managing it, it can become overwhelming.

Read more
An older businessman shakes the hand of a younger businesswoman to illustrate the concept of succession planning
20 May 25

Succession Planning: A Surprisingly Common Business Risk

Fast-growing companies, particularly those in technology and high-stakes industries, often prioritize immediate operational needs over long-term planning. One critical area that frequently gets overlooked is succession planning—a business continuity essential that can create serious vulnerabilities if not properly addressed.

Read more
Michael Kreil presents at 38c3 conference
13 May 25

The VW Group Data Breach is a Business Problem, not an IT Failure.

In December 2024, the Chaos Computer Club revealed that VW Group’s software unit Cariad exposed 9.5TB of sensitive data affecting 800,000 VW, Seat, Audi, and Skoda owners. The breach included personal information and location histories that, despite Cariad’s claims otherwise, were easily tied by researchers to individual customers.

Read more
Photograph of a sign meaning 'No Speed Limit'
8 May 25

Tech Debt in Scale-Ups

When tech companies hit hypergrowth, they face the challenge of evolving their software systems from minimally viable products (MVPs) to enterprise-grade platforms. These transformations extend beyond software development to affect entire organizations.

Read more
Photograph of Andes Mountains
1 May 25

Why Tech Debt Matters – And How to Pay It Off

When developers cut corners to ship products faster, they take on technical debt—a trade-off that can accelerate early growth but create long-term instability. Unlike financial debt, which can be strategic, tech debt compounds over time, leading to fragile systems, costly failures, and expensive remediation efforts.

Read more
Photograph of a pile of bills, cash, and a credit card
30 Apr 25

How Much Tech Debt is Too Much?

Tech debt is inevitable in innovation. The question isn’t whether your organization has it—but rather how well it’s managed. Proactive leaders strategically take on tech debt when necessary and implement processes to track, assess, and address it before it becomes a bottleneck.

Read more
Photograph of endless binders of paper reports
29 Apr 25

The Post-Mortem Dilemma: Why Companies Struggle to Learn from Incidents

Security incidents should be a catalyst for improvement, but too often, companies fail to extract meaningful lessons from them. Post-incident reviews are either rushed, incomplete, or focused on blame, leading to missed opportunities for resilience and long-term security improvements.

Read more
← Prev Next →