Peer-reviewed articles, applied research, and substantive analysis across IT leadership, cybersecurity governance, and human performance — by Wlad Pierre-François, Ph.D.
Featured Publication
A comparative synthesis of seven foundational frameworks — identifying the deep structure of human effectiveness, flourishing, and meaning.
All Publications
A rigorous cross-framework synthesis of seven foundational models on human flourishing, effectiveness, and meaning — proposing the IAHG, a five-layer integrative model.
A theoretical synthesis advancing the Integrated Risk-Behavioral Compliance Framework (IRBCF) — mapping HIPAA Security Rule modernization requirements to organizational capacity variables in resource-constrained small practice environments. Addresses the 2024–2025 HHS proposed rulemaking.
How IT leadership must evolve from operations management to security governance. Examines the 2023–2025 regulatory convergence, the five-dimension competency delta separating operational from governance posture, credential pathways and their actual signaling value, and the translation problem at board level.
Clinical staff are adopting AI faster than practices are governing it. Locates the exposure within existing HIPAA obligations rather than anticipated AI regulation, maps it to the NIST AI Risk Management Framework, and specifies a six-step control sequence for practices without dedicated compliance staff.
Five independent regulatory regimes — HIPAA, the FTC Safeguards Rule, SEC Regulation S-P, New York’s SHIELD Act and Part 500 — have converged on the same nine controls. Argues that small firms should build one program mapped to a neutral framework, and that the binding constraint is the decision record rather than budget.
A practitioner walkthrough of the Second Amendment to New York’s cybersecurity regulation — expanded governance obligations, MFA requirements, asset inventory mandates, and the phased compliance deadlines covered entities are measured against.
The configuration gap between a default Microsoft 365 tenant and one that actually satisfies client-confidentiality obligations under NY Rules of Professional Conduct Rule 1.6 — covering conditional access, retention, audit logging, and the settings most firms never change.
What underwriters now require before binding a policy, why attestations are being verified at claim time rather than at application, and the controls a small NY business needs in place to remain insurable at a defensible premium.
Occasional, substantive updates when new work is published — no marketing filler. Unsubscribe anytime.
