Skip to main content

Enterprise Trust Chronicles · Est. 2026

Notes from the procurement front.

On enterprise buying, procurement friction, security readiness and the commercial value of trust — written from the advisory desk, not the marketing department.

PROCUREMENTBUYING COMMITTEESSECURITY READINESSAI GOVERNANCERESEARCH

Published essays

Arguments from the advisory desk on the controls, evidence and operating decisions that earn enterprise confidence.

In the notebook

Published briefings appear here as they are approved. Until then, these are the arguments in preparation — no fabricated articles, results or client evidence.

ESSAYNO. 14 · PROCUREMENT

Your SOC 2 isn’t for the auditor. It’s for the deal.

Treat readiness as a revenue project with a compliance byproduct and everything reorders: the timeline, the budget owner, the definition of done — and who in the building actually cares whether it ships.

In preparation

ESSAYNO. 13 · BUYING COMMITTEES

What the buyer’s security team actually reads.

A tour of the review from the other side of the table — and the three artifacts that end it early.

In preparation

ESSAYNO. 12 · AI GOVERNANCE

AI governance is becoming a buying requirement.

Enterprise questionnaires are growing an AI section. What credible answers look like this year.

In preparation

ESSAYNO. 11 · PROCUREMENT

Procurement is not your enemy. Unreadiness is.

The clock that kills deals belongs to no one in the room. How to give it an owner.

In preparation

WHITEPAPERSECURITY READINESS

The Evidence Engine: organizing proof before it’s requested.

A working method for turning control activity into reviewable evidence — with the index template.

In preparation

REPORTANNUAL · RESEARCH

The State of Enterprise Trust — first annual review.

What security questionnaires say about how enterprises actually buy from startups.

In preparation

Research themes

Enterprise Trust & GRC

Practical control, evidence and assurance models for organizations selling into demanding environments.

AI Governance & Security

Accountability, risk-tiering, data safeguards and assurance for responsible AI adoption.

Assess AI Governance Readiness →

Public-Sector Security

Governance, procurement, assurance and stakeholder risk in high-accountability environments.

Cloud & Architecture Assurance

How identity, system boundaries and technical evidence support defensible security decisions.

Space Systems & Emerging Technology

Applied research into security, resilience and governance for complex emerging-technology environments.

The Trust Ledger

One idea, every two weeks.

A fortnightly note — one idea, one figure, one action — on how enterprises decide to trust vendors. The first issue is in preparation; ask for it on a strategy call and it will arrive when it ships.

Book an Enterprise Trust Triage

The Trust Ledger · Issue No. 1 · In preparation

The three artifacts that end a security review early


Security teams don’t read everything you send. They read three things, in a predictable order, and they decide in the first two…