New here
New here? Start here.
Four places to start, depending on what you need to check. Each one is short, and none of them asks for your email.
Founder of HARBOR. Author of Shrink-Wrap It. Ten years inside federal programs.
Four places to start
What the work is
The decision engagement, who it fits, and what it does not cover.
What the work looks like
Selected work, described at the role level. No client names.
The writing
Field notes on AI, federal technology and building products.
The book
Shrink-Wrap It: the productization playbook, five parts and fourteen chapters.
The words you will meet
The writing uses these terms without stopping to define them. Here they are once.
- CMMC
- (the DoD's cybersecurity certification model for contractors)
- FedRAMP
- (the federal program that authorizes cloud services for government use)
- ATO
- (authority to operate: the approval that lets a system run on a government network)
- CUI
- (controlled unclassified information: unclassified data that still carries handling rules)
- RAG
- (retrieval-augmented generation: an AI that answers from documents it looks up)
- OSCAL
- (the Open Security Controls Assessment Language: security controls as machine-readable data)
- SBOM
- (a software bill of materials: the list of components inside a piece of software)
- CDAO
- (the DoD's Chief Digital and Artificial Intelligence Office)
- JADC2
- (Joint All-Domain Command and Control: linking sensors and decision-makers across the services)
- IL4-IL6
- (DoD cloud impact levels 4 through 6, the tiers for progressively more sensitive data; IL6 covers classified material up to SECRET)