Inside the
Adversary's Loop
A Doctrine for Building, Measuring, and Operating Modern Data Security Programs
444 pages, five parts, fourteen chapters. Unpublished — it is our internal doctrine, and the reason our engagements look the way they do.
Data security is a match-up, not a checklist
Most frameworks are built to think about controls and threats: a control is an arrangement, a threat is a category, and the work is mapping one onto the other. That framing produces programmes that are internally coherent and externally beaten.
A match-up is two parties contesting each other in time. Each has state. Each runs a decision loop. Each acts in ways that change the information environment for both. The book starts from that condition and rebuilds the discipline on top of it — construction, measurement, and operating posture.
Three contributions
A composite performance metric
Availability, Coverage, Efficacy, Efficiency — one measure of whether a security service is actually working, applicable to protective and detection-and-response domains alike. Developed for this book; this is its first published treatment.
An eight-step constructive method
Requirements → control objectives → capabilities → technologies → humans & agents → continuous testing → continuous improvement → metrics. Every service built the same way, with automation as the substrate of every step.
ACEE per OODA phase, asymmetry as the third axis
Boyd's loop decomposed into measurable architecture, information asymmetry made measurable per phase, and deception operationalised as asymmetry inversion. This synthesis is what the book exists to develop.
Standing on other people's work is stated plainly in the book, not implied. OODA is Boyd's. Information asymmetry is Akerlof, Spence, and Stiglitz. The integration is ours — and they would recognise it as something they did not do.
Five parts
The Strategic Condition
The match-up, why most frameworks cannot see it, and the structural condition that makes manual programmes lose without trying.
The Constructive Methodology
The eight-step pipeline, the operational layer of testing and metrics, and automation as structural substrate rather than convenience.
The Three Lenses
ACEE, OODA, and information asymmetry developed in full, each closing with a worked example against a real DLP service.
Integration and the Operational Discipline
The three-lens diagnostic and its eight configurations, operating at contest cadence, deception as loop disruption, and the AI-era match-up.
Monday Morning
The diagnostic first, the substrate investment sequence, the first six months — and what not to do.
Not for sale
There is no download link on this page, and that is deliberate. The book is our working doctrine, not a lead magnet — a v1.0.2 print edition exists privately and is not publicly distributed.
The diagnostic in part four is what the first two weeks of an engagement look like. If you would like to know how it reads against your own programme, we are happy to talk it through.