uptime: 20+ years · role: security leadership · status: allergic to security theater
Security programs that work, not ones that just pass the audit.
I'm Jim Guckin. I've spent two decades leading security teams, and I write about the gap between what looks good on a dashboard and what actually protects an organization. I've been in the room when things went wrong…which is where most of the useful lessons come from.
what i do
Four hats, one job
Security Leadership
My primary focus is protecting the organization's data and systems from external and internal threats. I work closely with IT and other departments to implement and maintain strong security measures, and to educate and train employees on practices that actually stick.
Technology Mentor
I help others develop and improve their skills in the field. Whether it's answering questions, providing resources, or collaborating on projects, I try to be a useful resource for people growing their knowledge in technology.
Technology Educator
I design and deliver engaging lessons and hands-on activities that help people understand and apply key concepts in technology. In a classroom or online, the goal is the same: make it click.
Speaker & Writer
I share what I've learned through talks, writing, and my podcast. The goal is to spark honest conversations about what works in security…and to name the things that only look like they work.
latest from the blog
Recent posts
-
2026-08-20 · it-strategy
Stop Adopting AI Because Someone Read an Article About It
I sat in with a friend last month where a VP had presented a slide titled 'AI Transformation Roadmap.' Six workstreams, a maturity model, a timeline that somehow ended with 'full AI integration' by Q4. What it didn't have was an answer to the most basic question anyone should ask before spending money on anything: why are we doing this?
-
2026-08-11 · infosec
You Trained Them Not to Click, and Russia Found a Way Around That
Every security awareness program on the planet teaches the same core lessons. Don't click the link. Don't open the attachment. We've spent years drilling this into people. On July 22, 2026, a Russian threat group launched a campaign that made all of it irrelevant.
-
2026-08-05 · infosec
The Faucet, the PLC, and the Nation-State That Turned It Off
Last Sunday night, while most of Minnesota was winding down the weekend, operators at more than 30 community water systems got a call nobody wants. Their automated controls were down, and the pumps weren't responding. We've known this was coming for a long time. We just haven't done enough about it.
-
2026-07-29 · infosec
"Spared No Expense" (Except Where It Mattered)
John Hammond spared no expense on the dinosaurs. The IT infrastructure ran on one underpaid, resentful guy with keys to everything. I keep seeing the same pattern with AI.
testimonials --source verified-humans
What colleagues say
"I work with a lot of IT professionals and Jim ranks at the top. His ability to get to the bottom of issues and manage them until they are complete is incomparable. Jim is also a savvy negotiator who understands the value of vendor relationships, while at the same time knows what's best for his company."
"Jim is extremely knowledgeable about his field of expertise. Under his helm as Helpdesk Manager this department was run efficiently and effectively. Jim always took time to communicate to the end user and made sure he was available at all times."
"Jim made me advance my career and learn stuff on the fly, and for that I'm highly grateful. He shaped me into what I am today. Jim is a great asset to a company's IT department."
industries worked with