What I Learned in the First 12 Hours with OpenClaw
I spun up a self-hosted AI assistant on an old desktop running Ubuntu Server. Here's what broke, what worked, and what I'd do differently.
Exploring Practical Security, GRC, and Risk Leadership
Practical observations and personal perspectives on building security and governance programs that actually work in the real world.
About This Project
After years of working in security leadership roles — building governance, risk, and compliance programs — I continue to explore how companies of all sizes can approach security in ways that balance both technical rigor and business realities.
This site serves as a personal space where I share some of my thinking, experiences, and frameworks that I’ve found useful.
Topics I Often Explore
- Security Program Development
- Vendor Risk Management
- Incident Response Planning
- Secure Software Development
- Risk Metrics & Board Reporting
- GRC & Compliance Frameworks
- SOC 2, ISO 27001, HIPAA, GDPR, and others
My Approach
Security isn’t about adding endless controls — it’s about making smart, risk-aligned decisions that fit your business model.
I focus on:
- Pragmatic advice informed by real-world experience
- Balancing security needs with operational impact
- Building sustainable, adaptable security programs
- Avoiding unnecessary complexity and “security theater”
Contact
I’m always open to connect with others thinking about these topics.
© Whiteside Advisory — Personal perspectives on practical security leadership.
The GRC SaaS Killer
GRC platforms promise to run your program. They deliver data entry, rigid workflows, and lock-in. Here's what a repo-based approach with AI models actually looks like.