Systems Thinking for Cybersecurity

Michael's energy and clear, structured approach made the systems thinking course both refreshing and engaging. His guidance was thorough without ever feeling rigid. The diverse mix of peers brought rich, real-world perspectives that elevated every discussion.

Michael successfully breaks down how a systems thinking approach to cyber security really benefits all aspects of the business including people, process and technology.

I am Akhilesh Das an experienced IT professional having worked in different geographies and cultures. What I loved most about this course was its profound ability to demystify complex problem-solving. The DSRP framework has been a game-changer, offering practical tools that have reshaped my approach to challenges in both cybersecurity and daily life. It’s a fantastic course for anyone looking to think more effectively! It helps you dive deeper into your thought process and give it more structure. Furthermore, it enables you to map your mental models to the DSRP framework, which helps you understand which parts you were already applying and what to consciously use for even more effective thinking.

Michael Collins spent more than twenty years in technology and cybersecurity across banks and superannuation funds before writing Systems Thinking for Cybersecurity. He says writing it felt "less like a choice and more like an obligation," and that weight is on the page. The book is for anyone in the field, from the newcomer to the senior leader who leaves a board meeting knowing something didn't register. His real subject is culture, and his case for it is stronger than the title suggests. Security keeps failing, he argues, because the industry tries to control people rather than understand them, and fear is how it does the controlling. Vendors sell on fear, managers absorb it, and a workforce told that catastrophe is one careless click away stops owning up to its mistakes. Collins is vulnerable and honest as he identifies some faults about his own profession. Chapter seven is the one readers will come back to. An engineer ships code without its security review to hit an executive's deadline, and the reflex almost everywhere is to discipline him. Collins runs an eight-question review borrowed from aviation and finds most answers pointing to the conditions the engineer was working under. The industry's habit, in his phrase, is to throw the human under the bus. It is the whole argument in one worked example, and a reader could use the lessons the very next day. The book takes its time. Collins spends seven chapters on why the current thinking fails, working through Darwin, the industrial revolutions and complexity science before the framework at the center of the book properly arrives. Readers may find the framework abstract compared to the first half of the book, but the lessons learned are worth seeing it through. This is a leadership book disguised as a cybersecurity book, and it is better for it. A chief information security officer who keeps losing the same budget argument will find language for why. Or, a manager who has left a vendor demo feeling managed will find value in this book. Collins has sat through the meetings he describes, and you can tell that he writes from experience.

This paper argues that current cybersecurity strategies over-rely on technology and that systems thinking can offer a more accessible, reality-based way to organize information and think about cybersecurity. It explicitly notes that cybersecurity education has emphasized technical skills with little attention to cognitive skills.

Wonderfully insightful, digestible DSRP483/cutting edge Systems Thinking morsels from the the perspective of a professional in the world of cybersecurity, a highly complex application of systems thinking, thinking through problems and implementing solutions. The simplicity and digestibility is an ode to the simplicity that Michael highlights. Highly recommend the newsletter to those in the world of cybersecurity/cybernetics.

The article on conflation vs confusion was one of the best articles in cybersecurity I have ever read. In my time in the industry, there has always been a frustration around this however many of us have just accepted it to be par for the course. This article does a great job of showing it doesn't have to be accepted and gives tools on how to solve the challenge. Well done.

My name is Rohini, and I am a Cyber GRC Analyst. Michael’s Systems Thinking course helped me develop a more deliberate and structured way of reasoning. I now examine the underlying assumptions, perspectives and relationships within a situation, which has improved how I communicate and make decisions. This has been particularly valuable in cyber risk management, where decisions must balance technical requirements, organisational priorities and the realities of people. The course has made my thinking clearer, more empathetic and more confident.

Michael introduced me to system thinking at one point in my career. I've always curious about it. This course deepens my knowledge and understanding about it and helps me apply this to my personal life but also in cyber security. It broadens my perspective and helps to not have a bias and linear view about the world... including cyber security. I aspire to be able to do this at a quicker rate one day. For anyone that is curious, I'd say it's well worth the experience to learn from the very best in the cyber industry.

the universal applicability of Systems Thinking - specifically DSRP. In this course, you will learn a valuable framework that can be applied anywhere, on anything.

The format of the course was well designed for effectiveness, while keeping it short enough to follow even when you have busy schedules. Michael provided session summaries and follow up instructions very clearly to help reinforcement.

This course was great because the concepts it teaches are easy to grasp, universally applicable and powerful in the insights that can be achieved. I tell my friends it's not a course in what to think, it's a course in how to structure your thinking.

As a Technology and Cyber Governance, Risk, and Compliance (GRC) professional, I am constantly navigating complex systems and interconnected risks. Completing the Systems Thinking course has been a truly enriching experience that deepened my understanding of how our decisions and challenges are intricately connected. The course introduced me to the powerful DSRP framework which has significantly enhanced my ability to think more critically and strategically. The framework helps bring a valuable shift in perspective-from reactive, tactical problem-solving to a more holistic and thoughtful approach. I now feel better prepared to address complexity in both professional and personal contexts. A heartfelt thank you to Michael Collins for delivering the course with clarity and enthusiasm. Their ability to simplify complex ideas into thought-provoking concepts and create space for meaningful discussions made the experience truly enjoyable. I would highly recommend this course to anyone looking to strengthen their problem-solving skills and strategic mindset. As Albert Einstein wisely said, “We cannot solve our problems with the same thinking we used when we created them.” This course has inspired me to continually strive to be a ‘better thinker’ and I look forward to applying the learning to drive meaningful impact in my career and beyond!!

A huge thank you for authoring the newsletters and keeping me so engaged as a reader. Every article is incredibly insightful. I particularly enjoy the micro-learning- a great way to gain quick, valuable knowledge on the go. Please keep them coming!

Places cybersecurity well within a systems thinking framework, allowing consideration of all and especially alternate perspectives.

I love your transformation! Your writing style, the interesting content, and that you bring knowledge that is genuinely useful, is refreshing.

I received your newsletter A Guide to Managing Emotions this morning, right when I needed it :), I'm a big fan of your work.

I found the Cyber Cognition Introduction to Better Thinking (For Cyber Security) course to be insightful and well-delivered. The content was clear and punchy, with plenty of practical suggestions for how to implement better thinking day-to-day. It has given me a good grounding in the basics of D-S-R-P systems thinking, and I'd recommend the course to anyone looking to improve their understanding of systems thinking in general (whether cybersecurity-focused or otherwise).

I recently completed the "Better Cyber Thinking" course, and it was an excellent experience. The course provided a great introduction to key concepts, such as DSRP etc. Michael Collins is very knowledgeable and presented the material in an engaging and easy-to-understand manner. The course was well-structured, with clear objectives and a logical progression of topics. Additionally, the flexibility of the email format made it easy to fit into my schedule. Overall, I highly recommend this course to anyone looking to build a solid foundation in cyber thinking. It's a great starting point for beginners too.