This site isn't about me. It's where the useful things end up.
I'm Evan Wheeler. I've spent 25+ years trying to make sense of risk — across cybersecurity, technology, operations, enterprise risk, quantification, and now AI. I've been a CISO twice, led enterprise risk programs, written Security Risk Management (Syngress, 2011), and taught graduate courses along the way.
What I'm exploring
The goal is simple: make risk thinking more useful. A few questions keep coming up:
- Better decisionsHow can risk management help people make better decisions rather than simply document them?
- Beyond the heat mapWhat are better ways to understand uncertainty, scenarios, dependencies, and the things that actually matter to a decision?
- AI and riskWhat new risks come with AI, and how might AI change the way risk management itself is practiced?
- Practical toolsCan a good visual, model, framework, or template make a difficult risk conversation easier?
- Blind spotsWhat are we not seeing because of the way we've framed the problem?
Why the philosopher
Good risk work starts with admitting what you don't know. Socrates got there first, so he got the job. 1
How this site works
LinkedIn is the agora: where I try ideas out and argue about them. This site is where things go once the argument has settled. GitHub holds the files and the version history.
Each piece carries its own license, shown on its page. The AI Risk Map is CC BY-SA 4.0; code and Claude skills are MIT. Site text and the philosopher are mine.
Consider this site a workshop, not a finished body of knowledge. Take what is useful. Question what isn't. Build on it.
Say hello on LinkedIn1 The quote paraphrases Plato's Apology. Socrates would want that noted. ↩