This paper explores how growth in systems, relationships and operational demand can change the way cybersecurity risk is managed. It offers a framework for discussion rather than a definitive scaling law.
I’m sharing it as food for thought and would welcome feedback from practitioners, researchers and leaders. Where does this reflect your experience? What would you challenge, and how might we test these ideas in practice?
Carlos Morales · Version 4.0 · November 2026


Leave a Reply