Field notes

From the proving ground.

Essays on how we test, what we test, and why the easy answers are usually wrong.

01
15 January 2026

Why a written exam alone can never prove a security skill

Recall is not judgement. We break down why scenario-based testing plus a live defence is the only honest signal.

Read→
02
10 January 2026

Reading a real incident: signal versus noise

A walk-through of how a practitioner triages an alert flood, and what we test when we ask you to do the same.

Read→
03
5 January 2026

The questions we ask when we want you to fail honestly

Designing exam questions that separate genuine skill from pattern matching is harder than it looks.

Read→