Notes on the work
Some of the questions behind an audit or technology-risk review deserve a little more explanation than a résumé can give them. These are two I’ve written out.
The examples are public illustrations. They don’t describe confidential engagements.
An access exception is a starting point
A mismatch between an HR list and a directory export can be useful. I’d check the identity, timing, review scope and source evidence before deciding what it means.
An AI tool review starts with its data
I would begin with the information the tool can see and the actions it can take. That makes the discussion about permissions, accuracy and oversight much more specific.
Earlier posts
My older writing lives in the blog archive. It covers a wider mix of subjects from the time I published it.