20-minute talk
A concise introduction to the Trust Surface, the email example, organisational fragmentation, the Trust Signal Gap, evidence, ownership and decision-making.
Speaking
The organisation chart has no box for digital trust.
Why organisations struggle to govern the relationships their digital services depend on.
Talks and briefings for technology, cyber, governance and leadership audiences exploring how digital trust becomes visible enough to govern and act upon.
Flagship idea
Your organisation has a Trust Surface.
People experience an organisation through domains, email, identity, digital services, platforms and third parties. Those relationships create trust-relevant conditions that can be assessed using attributable evidence.
The organisation chart distributes ownership of those parts, but it does not establish whether the whole Trust Surface is understood, evidenced or governed.
The Trust Signal Gap
What the organisation intends or internally assures is not always what the evidence supports.
The Trust Signal Gap is the difference between intended or internally assured posture and the posture supported by attributable evidence at the Trust Surface.
Security posture and Digital Trust Posture are related, but they answer different questions. A mature internal security program does not by itself establish whether externally experienced trust conditions are understood, attributable and governed.
A concrete example
Consider email.
A mature security program does not by itself show whether authorised senders are understood, whether unauthorised direct-domain spoofing is constrained, or whether current evidence supports the organisation's email-integrity posture.
The talk uses practical examples like this to connect technical signals to ownership, evidence, governance and decisions.
Formats
Talks and briefings for different settings.
Longer briefing
By arrangement, a longer session can explore deeper examples, the limits of public signals and more time for discussion and reflection.
Related themes
Evidence, authority and decisions.
Related speaking themes include domain and email authority, third-party dependency, responsible technology, observable evidence and the discipline of making technology decisions possible.