Jennifer Lin
Jennifer Lin writes about the security controls people actually live with: passwords, MFA, admin rights, phishing reports and the restore nobody has timed.
Jennifer Lin works in IT service management: incident and problem management, change management and continual service improvement, where a control is judged by whether it holds up on an ordinary working day. She is studying toward the CISSP certification, and her particular interest is how security can become a natural part of everyday IT operations rather than a gate in front of them.
Her posts on Load Path Research come from that angle. A password policy that trains people into predictable passwords, an MFA rollout that skipped the admin accounts, a phishing report button nobody can find on a phone, a backup job that is green until someone tries to restore: each is a control that exists on paper and fails in use. She writes about closing that gap, usually by making the safe behaviour the easy one.