Thought Leadership &
Original Research
Peer-reviewed articles, applied research, and substantive analysis across IT leadership, cybersecurity governance, and human performance — by Wlad Pierre-François, Ph.D.
Featured Publication
Toward an Integrated Architecture of Human Greatness
A comparative synthesis of seven foundational frameworks — identifying the deep structure of human effectiveness, flourishing, and meaning.
All Publications
Toward an Integrated Architecture of Human Greatness
A rigorous cross-framework synthesis of seven foundational models on human flourishing, effectiveness, and meaning — proposing the IAHG, a five-layer integrative model.
HIPAA Security Rule Compliance in Small Medical Practices: A Risk-Based Framework
A theoretical synthesis advancing the Integrated Risk-Behavioral Compliance Framework (IRBCF) — mapping HIPAA Security Rule modernization requirements to organizational capacity variables in resource-constrained small practice environments. Addresses the 2024–2025 HHS proposed rulemaking.
The CISO-Ready IT Director: Positioning Technical Leadership for the Governance Era
How IT leadership must evolve from operations management to security governance. Examines the 2023–2025 regulatory convergence, the five-dimension competency delta separating operational from governance posture, credential pathways and their actual signaling value, and the translation problem at board level.
Governing Shadow AI in Clinical Environments: A Pre-Deployment Control Framework
Clinical staff are adopting AI faster than practices are governing it. Locates the exposure within existing HIPAA obligations rather than anticipated AI regulation, maps it to the NIST AI Risk Management Framework, and specifies a six-step control sequence for practices without dedicated compliance staff.
The Compliance Convergence Problem: Enterprise Obligations at Small-Firm Scale
Five independent regulatory regimes — HIPAA, the FTC Safeguards Rule, SEC Regulation S-P, New York’s SHIELD Act and Part 500 — have converged on the same nine controls. Argues that small firms should build one program mapped to a neutral framework, and that the binding constraint is the decision record rather than budget.
NYDFS 23 NYCRR 500 Second Amendment: What Covered Entities Must Implement
A practitioner walkthrough of the Second Amendment to New York’s cybersecurity regulation — expanded governance obligations, MFA requirements, asset inventory mandates, and the phased compliance deadlines covered entities are measured against.
Microsoft 365 Security Hardening for Law Firms
The configuration gap between a default Microsoft 365 tenant and one that actually satisfies client-confidentiality obligations under NY Rules of Professional Conduct Rule 1.6 — covering conditional access, retention, audit logging, and the settings most firms never change.
Cyber Insurance Requirements for NYC Small Businesses
What underwriters now require before binding a policy, why attestations are being verified at claim time rather than at application, and the controls a small NY business needs in place to remain insurable at a defensible premium.
Get new research in your inbox
Occasional, substantive updates when new work is published — no marketing filler. Unsubscribe anytime.