The Secure Blog
The Christian Espinosa blog.
Thought leadership on cybersecurity, leadership, and the human side of high-performing teams.
Featured
The Long Walk, The Marathon, And The Friendship You Get To Keep For A Few Days
I read The Long Walk in high school and thought about it at mile 22 of every Ironman. The movie added something new: a friendship worth having even when you know it ends.
Read the full post: The Long Walk, The Marathon, And The Friendship You Get To Keep For A Few Days
Slow Is Smooth, Smooth Is Fast
The same lesson shows up in F4 racing, Ironman, leadership, and bringing a product to market: the fastest people are not rushing; they are smooth.
Read the full post: Slow Is Smooth, Smooth Is FastLatest
-
Neurodivergent in Tech: Do You Still Have to Learn EQ?
High tech rewards deep focus and punishes the communication gap. Why neurodivergent, neurotypical, and mixed teams all have to learn EQ, and what that actually looks like.
Read the full post: Neurodivergent in Tech: Do You Still Have to Learn EQ? -
Too Old Is a Decision, Not an Age: How People Quietly Stop Living
Most people don't run out of time, they run out of permission. Why too old is a story you tell yourself, and how identity calcification turns living into existing.
Read the full post: Too Old Is a Decision, Not an Age: How People Quietly Stop Living -
I Am Statements: How Identity Language Rewires Behavior
The words after I am decide who you become. Why I am an athlete beats I'm trying to get back in shape, and how identity-based language makes change stick.
Read the full post: I Am Statements: How Identity Language Rewires Behavior -
The Circumstance Will Lie To You
Mile 18 of an Ironman taught me something that carried straight into building Blue Goat: a bad moment is weather, not a verdict. Hold the vision, walk through it, finish what you started.
Read the full post: The Circumstance Will Lie To You -
Wet Tires At COTA: When The Conditions Change
Day two of Skip Barber Advanced Formula Car at COTA. Frost on the track, wet tires, and a lesson that applies on the circuit, in leadership, and in cybersecurity: stop forcing the original plan and read the conditions for what they are.
Read the full post: Wet Tires At COTA: When The Conditions Change -
No Wasted Years, No Wasted Cycles
Jet lag, heavy metal, and the founder question that survives every time zone: what's worth it? Why most MedTech cybersecurity pain comes from waiting — and what Iron Maiden's Wasted Years has to do with building it right early.
Read the full post: No Wasted Years, No Wasted Cycles
Browse by category
All posts
Page 1 of 7 · 163 total
-
98% Desire, 2% Ambition: Is Russell Brunson Right?
Russell Brunson says 98% of people have desire and only 2% have the ambition to back it up. Is the number real? And what does it actually mean on a Tuesday in February?
Read the full post: 98% Desire, 2% Ambition: Is Russell Brunson Right? -
The Long Walk, The Marathon, And The Friendship You Get To Keep For A Few Days
I read The Long Walk in high school and thought about it at mile 22 of every Ironman. The movie added something new: a friendship worth having even when you know it ends.
Read the full post: The Long Walk, The Marathon, And The Friendship You Get To Keep For A Few Days -
Neurodivergent in Tech: Do You Still Have to Learn EQ?
High tech rewards deep focus and punishes the communication gap. Why neurodivergent, neurotypical, and mixed teams all have to learn EQ, and what that actually looks like.
Read the full post: Neurodivergent in Tech: Do You Still Have to Learn EQ? -
Too Old Is a Decision, Not an Age: How People Quietly Stop Living
Most people don't run out of time, they run out of permission. Why too old is a story you tell yourself, and how identity calcification turns living into existing.
Read the full post: Too Old Is a Decision, Not an Age: How People Quietly Stop Living -
Slow Is Smooth, Smooth Is Fast
The same lesson shows up in F4 racing, Ironman, leadership, and bringing a product to market: the fastest people are not rushing; they are smooth.
Read the full post: Slow Is Smooth, Smooth Is Fast -
I Am Statements: How Identity Language Rewires Behavior
The words after I am decide who you become. Why I am an athlete beats I'm trying to get back in shape, and how identity-based language makes change stick.
Read the full post: I Am Statements: How Identity Language Rewires Behavior -
The Circumstance Will Lie To You
Mile 18 of an Ironman taught me something that carried straight into building Blue Goat: a bad moment is weather, not a verdict. Hold the vision, walk through it, finish what you started.
Read the full post: The Circumstance Will Lie To You -
Wet Tires At COTA: When The Conditions Change
Day two of Skip Barber Advanced Formula Car at COTA. Frost on the track, wet tires, and a lesson that applies on the circuit, in leadership, and in cybersecurity: stop forcing the original plan and read the conditions for what they are.
Read the full post: Wet Tires At COTA: When The Conditions Change -
No Wasted Years, No Wasted Cycles
Jet lag, heavy metal, and the founder question that survives every time zone: what's worth it? Why most MedTech cybersecurity pain comes from waiting — and what Iron Maiden's Wasted Years has to do with building it right early.
Read the full post: No Wasted Years, No Wasted Cycles -
Fade To Black And The Loneliness Of Leadership
Nothing's wrong with my marriage. Blue Goat Cyber is scaling fast. And still, leadership is lonely in ways the org chart doesn't show. Naming what most founders won't say out loud — and why honesty is part of the job.
Read the full post: Fade To Black And The Loneliness Of Leadership -
Bells Beach, Point Break, And Choosing True Over Safe
Made it to Bells Beach, Victoria — where Point Break filmed Bodhi's final wave. A bucket-list stop, and a reminder of the line from the movie that quietly shaped how I make decisions: choose what's true over what's safe.
Read the full post: Bells Beach, Point Break, And Choosing True Over Safe -
Speed Is Easy. Control Is Hard.
Three days of Formula 4 with Skip Barber at New Jersey Motorsports Park. Top speed near 185 kph — but the lesson wasn't the number. It was how long you can stay near it without losing control. The same principle runs racing, business, and life.
Read the full post: Speed Is Easy. Control Is Hard. -
Eternal Optimism Is A Curse. Informed Optimism Is A Blessing.
The leader who says 'we've never had an issue, so we're fine' isn't optimistic — they're asleep. The difference between hope and awareness, and why one keeps you ready while the other keeps you comfortable until the bad news hits.
Read the full post: Eternal Optimism Is A Curse. Informed Optimism Is A Blessing. -
Founder-CEO vs Hired CEO: The Difference Is Personal
I've been both — a founder who built and sold a company, and a founder watching a non-founder CEO take the wheel. Why founder-CEO and professional CEO are not the same job, and why Blue Goat Cyber is built the way it is.
Read the full post: Founder-CEO vs Hired CEO: The Difference Is Personal -
Five Seconds On Elbrus And The FDA Submission
Four hours before this summit photo on Mt. Elbrus, I almost died from five seconds of lost focus. Same mistake MedTech teams make on FDA cybersecurity submissions — and the self-arrest that gets you out of it.
Read the full post: Five Seconds On Elbrus And The FDA Submission -
The Ultrasound That Found My Clots: Why Medical Device Cybersecurity Is Personal
In 2022 a Doppler ultrasound found six blood clots in my left leg. That device saved my life. It's also why I treat medical device cybersecurity as a patient safety issue, not a compliance checkbox.
Read the full post: The Ultrasound That Found My Clots: Why Medical Device Cybersecurity Is Personal -
Don't Stop Believing: The Comeback Isn't Dramatic
Six blood clots in 2022. A year later, a finish line at IRONMAN 70.3 Chattanooga and a song I used to think was cheesy. What nobody tells you about coming back from something that almost killed you.
Read the full post: Don't Stop Believing: The Comeback Isn't Dramatic -
The Hard Part Is The Bar, Not The Fall
Hanging off an inverted biplane at the World Free Fall Convention taught me something about leadership: the falling is easy. The bar is what costs you.
Read the full post: The Hard Part Is The Bar, Not The Fall -
Tulum, Prosecco, and the Sign I Almost Missed
I'd just sold Alpine Security and every instinct said grind the next thing. Then I sat still in Tulum long enough to hear what was actually around me, and the next move got obvious.
Read the full post: Tulum, Prosecco, and the Sign I Almost Missed -
Check Your Grip: What Top Gun Still Teaches Me About Leadership
Top Gun sent me to the Air Force Academy and shaped how I think about leading under pressure. Thirty years later, the lesson I keep coming back to is about grip — and when to loosen it.
Read the full post: Check Your Grip: What Top Gun Still Teaches Me About Leadership -
Through Immersion Comes Clarity
Sixteen-hour days on AI and the business aren't balanced or sustainable — but they're the fastest way to see the gaps you've been stepping over for years.
Read the full post: Through Immersion Comes Clarity -
What Ozzy and Zakk Taught Me About Not Getting Sanded Down
Ozzy Osbourne and Zakk Wylde got me through the dark stretches and shaped who I am. The lesson — in music and in leadership — is to stop sanding down the edges that make you you.
Read the full post: What Ozzy and Zakk Taught Me About Not Getting Sanded Down -
What a 'Good' SBOM Actually Looks Like — And What Reviewers Reject
FDA reviewers see thousands of SBOMs. Most are wrong in the same handful of ways. Here's what a defensible Software Bill of Materials looks like for a medical device submission — and the patterns that trigger a deficiency.
Read the full post: What a 'Good' SBOM Actually Looks Like — And What Reviewers Reject -
If Your Reviewer Can't See the System, You Don't Have an Architecture
Security Architecture Views are where most medical device submissions either earn trust or lose it. Here's what a clear, defensible architecture view looks like — and why most teams over-engineer the diagrams and under-engineer the boundaries.
Read the full post: If Your Reviewer Can't See the System, You Don't Have an Architecture