← All posts

Cybersecurity leadership

How I think about decisions under uncertainty

Kin Levi

A cyber leader rarely gets complete evidence on the first hour of an incident. Waiting for certainty can itself become a decision with a cost.

What I have learned

Reversible actions deserve a lower evidence threshold than irreversible ones. I try to label what we know, what we infer and what would make us change course.

What I would do

I would write down the decision, deadline, owner, evidence and rollback path. That record helps teams act promptly and makes later learning fairer than hindsight alone.

Kin Levi