Insights for Security Leaders

A Structured Catalogue of Articles by Eckhart Mehler

Cybersecurity is no longer a specialist discipline that can be delegated to technology teams alone. It has become a question of leadership, organizational agency, strategic dependency, resilience, and trust.

This catalogue brings together my published articles for CISOs, CIOs, board members, risk leaders, technology executives, and professionals who must make decisions in environments where security, transformation, regulation, and geopolitics increasingly overlap.

The articles are grouped by the questions they help leaders answer — not by the date on which they were published.

1. Cybersecurity Leadership and the Strategic CISO

For leaders asking: What must the CISO role become?

Leadership, influence, and professional effectiveness

2. Governance, Risk, and the Limits of Compliance

For boards asking: Are we managing risk — or merely documenting it?

ISO/IEC 27001 as a management system

3. Artificial Intelligence, Decision Systems, and AI Governance

For executives asking: What are we about to let AI decide?

AI agents, RAG, and the future of software

AI and machine-learning security

4. Responsible AI, Regulation, and Sustainable Digital Transformation

For leaders asking: How can innovation remain legitimate and trustworthy?

5. Cloud Security, Digital Sovereignty, and Strategic Dependency

For boards asking: Who ultimately controls our digital operating model?

Cloud security architecture and operations

6. SAP Security and Enterprise Transformation

For executives asking: Can a transformation succeed if governance does not go live?

SAP S/4HANA on Microsoft Azure

SAP RISE governance and assurance

SAP security, resilience, and incident response

7. Zero Trust, Identity, and Access Governance

For security leaders asking: Can trust still be assumed anywhere?

8. Threat Intelligence, APTs, Spyware, and Cyber Resilience

For leaders asking: Who is targeting us, why, and how long could they remain unseen?

Advanced Persistent Threat Series

This series examines the geopolitical, strategic, organizational, and technical dimensions of advanced persistent threats.

Spyware Industry Series

This series examines the commercial spyware ecosystem, its geopolitical use, its ethical implications, and the defensive measures required by organizations and individuals.

9. Digital Trust, Cryptography, and Future Readiness

For leaders asking: What will trust mean when technology and geopolitics collide?

10. Security Culture, People, and Organizational Resilience

For organizations asking: How does security become part of everyday decision-making?