I've been thinking about joining Hive for quite a while.
The funny thing is... I wasn't sure what my first post should be.
Should I introduce myself?
Talk about my work?
Write about cybersecurity?
In the end, I decided to simply write about something I've been thinking about for a long time.
There are two phrases I hear more often than I wish.
"It's always been like that."
And almost immediately after...
"I thought someone had already reported it."
Maybe it's because I work in Business Continuity and Technology Risk, but every time I hear those words, I end up asking myself the same question.
How many major incidents actually started like this?
Probably more than we imagine.
Not with a hacker.
Not with ransomware.
Not with a server suddenly going offline.
But with something much smaller.
A system that's a little slower than yesterday.
An error message that appears once in a while.
A strange behavior that everyone notices...
...until nobody notices it anymore.
That's what fascinates me.
People don't usually ignore problems on purpose.
They simply adapt.
Little by little, the unusual becomes routine.
And eventually, someone says:
"It's always been like that."
At that moment, the problem hasn't disappeared.
We've just stopped seeing it.
I spend a lot of time thinking about resilience, risk, continuity, recovery, and cybersecurity.
They're all important.
But sometimes I wonder if the biggest vulnerability isn't technical at all.
Maybe it's when an organization slowly loses the habit of asking,
"Is this normal?"
I've always believed that reporting an incident shouldn't feel like blaming someone.
It should feel like taking care of the place where we all work.
Because every small report is an opportunity.
An opportunity to fix something before it grows into a much bigger problem.
The most resilient organizations are not the ones that never have incidents.
They're the ones where people still pay attention to the small things.
Where curiosity is stronger than routine.
Where someone still feels comfortable saying,
"Something doesn't look right."
Maybe that's why those two simple phrases keep coming back to my mind.
Because sometimes...
The most expensive risk isn't the one that happens.
It's the one everyone quietly accepted as "normal."
Thank you for reading my very first post on Hive.
I'd really enjoy reading your thoughts.
Have you ever seen a "small issue" become a much bigger problem simply because everyone assumed it was normal?
