BADBADGERINFOSEC

Independent cybersecurity consulting

Security has
a job to do.
Make it count.

Protect people, keep essential work moving, and make better decisions about risk. That’s where the work starts.

Explore the focus areas
The starting point

Before choosing a tool,
understand what must keep working.

01 / Focus

Good judgment.
Practical engineering.

BadBadger is being built around the places where security decisions meet day-to-day operations.

01

Security direction
& risk

Understand what matters to the business. Turn competing security demands into priorities, decisions, and work people can own.

  • Program direction and governance
  • Risk assessment and prioritization
  • Leadership advice and roadmaps
02

Architecture
& engineering

Build safeguards that fit how systems operate, how teams deliver, and how access is actually used.

  • Cloud and enterprise security
  • Identity and access
  • Endpoint and vulnerability management
03

Detection
& readiness

Make it easier to spot problems, investigate them with useful context, and know who needs to act.

  • Monitoring and detection strategy
  • Security operations and automation
  • Incident preparedness

02 / Approach

An answer you
can act on.

A finding is useful when it helps someone make a decision. Every recommendation should explain the problem, the tradeoffs, and the next step.

  1. 01

    Understand the operation.

    What needs to keep working? Who depends on it? Where do authority, access, money, and sensitive information meet?

  2. 02

    Establish what’s true.

    Separate observed facts from assumptions. Be clear about what was reviewed, what remains uncertain, and what could go wrong.

  3. 03

    Choose a workable response.

    Weigh the risk against cost, effort, disruption, and the team’s capacity. Explain what deserves attention now and what can wait.

  4. 04

    Put ownership behind it.

    Define the next action, the person responsible, and the evidence that will show whether the change worked.

03 / The person behind the practice

Dave Brock.

Security leader. Engineer. Builder.

I’ve built security programs and engineered the systems behind them. My work spans cloud and enterprise security, identity, vulnerability management, monitoring, and security operations.

I care about whether the work holds up after the presentation ends. Can the team operate it? Does someone own it? Does it reduce a risk that matters?

BadBadger is the independent practice I’m developing around that approach, grounded in clear thinking, practical work, and respect for the people who have to carry it forward.

Connect on LinkedIn Personal site

Start with a conversation

What needs
to work better?

Bring the problem, the uncertainty, or the decision you’re trying to make. We can start there.

Talk with Dave on LinkedIn

The practice is in development. Introductory conversations are welcome; engagement availability, scope, and terms are confirmed separately.