Send us Fan Mail

Nothing about the Homeland Security Information Network ever looked broken. Alerts kept going out. Information kept flowing. That's what made it dangerous.

In this episode, Mike breaks down the HSIN breach — discovered in early July after weeks inside the platform federal, state, local, and private-sector partners use to share threat intelligence — and the failure underneath it that has nothing to do with cybersecurity expertise. Every agency pulling information off that platform had a source with a track record. What none of them had was a running answer to a second, separate question: is this specific information still accurate, right now — because the first answer had been "yes" for so long that nobody thought to keep asking the second one.

That distinction — trusting a source versus verifying today's claim from it — is the same discipline intelligence analysts are trained to hold onto, and it's the same discipline that failed inside SolarWinds in 2020, when a digitally signed, routinely trusted software update carried a backdoor into roughly 18,000 organizations, including several federal agencies, for months before anyone noticed.

This episode walks through:

• What actually happened inside HSIN, and why the platform staying operational the entire time is the real warning sign
• The difference between trusting a source and verifying what it's telling you right now — and why almost every organization quietly collapses the two into one
• How the SolarWinds compromise shows the same pattern at a different scale
• Why vetting a vendor once at the start of a relationship isn't the same as ever checking again
• Four low-cost, low-effort ways to keep confirmed information from quietly turning into stale assumption — without adding headcount or new software: expiration dates on operational data, trigger-based audit gates tied to change management, tolerance-bandwidth alerts, and the ten-minute pre-mortem
• A three-step, no-new-software exercise for finding the sources your organization has stopped questioning, before something forces the question for you

Mentioned in this episode: Business Lifelines™, Information Hygiene, the Signal Integrity Assessment

www.southwindplanning.com

www.bluetogray.beehiiv.com

Send us Fan Mail

What the Hell Happened? — Episode 4: What's Actually on the Shelf?

Two headlines that had nothing to do with each other, until they did.

In January 2026, Pfizer discontinued the injectable form of Zithromax. Two months later, the tablets followed. Azithromycin isn't some rare specialty drug — it's one of the most prescribed antibiotics in the country, used for pneumonia, pelvic infections, and dozens of everyday cases in hospitals and clinics nationwide. It joined 223 other active U.S. drug shortages in the first quarter of the year, the second straight quarter that number climbed.

Around the same time, in a completely different industry, the price of NOR flash climbed toward six hundred dollars per rack inside Nvidia's flagship AI servers. It's not a chip anyone thinks about. It's the unglamorous memory chip that quietly boots up nearly every server on earth, and it had never been the bottleneck before.

Mike McCracken walks through both stories and the doctrine underneath them: resource typing, a discipline built inside emergency management that most organizations outside that world have never encountered. It's the difference between knowing a resource technically exists somewhere and knowing it's actually verified, available, and ready when you need it. A backup vendor on a list isn't the same thing as a backup vendor that's been checked.

What the hell happened? And what does your organization currently assume is available that's never actually been tested?

www.southwindplanning.com

www.bluetogray.beehiiv.com

Send us Fan Mail

Episode 3: The Dashboard Delusion

A senior bank attorney puts an illegal practice in writing to his board. He gets fired. The board investigates — and keeps charging the fees for two more years. Three states over, a pharmaceutical manufacturer's quality failures pile up on the production floor while leadership's dashboard stays green the whole time.

Two industries. Two completely different failure modes. The exact same ending: courts holding the people at the top personally accountable.

In this episode, we break down what actually happened inside Regions Financial's $191 million overdraft fee scandal and Teligent Inc.'s collapse into bankruptcy — and what emergency management doctrine reveals about the gap between having a warning system and having a system that forces you to act on the warning.

You'll learn:

• Why "compliant" and "functioning" are not the same thing — and why courts are starting to tell the difference
• How Business Lifelines™ break down when Information Flow, Decision Authority, and Risk Recognition stop working together
• The Delta of Decay™ — the quiet, unmeasured drift that turns a working system into a broken one, one heroic workaround at a time
• A 30-minute Monday morning exercise to map exactly how a warning would reach your desk — and what would have to go wrong before it does

If this episode raises questions about how information moves through your organization, that's exactly what a Signal Integrity Assessment is built to surface. Learn more at www.southwindplanning.com.

www.southwindplanning.com

www.bluetogray.beehiiv.com

Send us Fan Mail

On August 1, 2012, Knight Capital Group lost more than $400 million in forty-five minutes. Ninety-seven automated error alerts fired before the market opened that morning. All ninety-seven went unread.

Three years later, Target Canada's inventory system reported normal operations while distribution centers overflowed with product that couldn't reach store shelves. Customers walked in, found nothing, and didn't come back. 17,600 employees lost their jobs. The losses exceeded five billion dollars.

Different industries. Different scales. The same failure underneath — two crises arrived simultaneously, and neither organization had a plan that accounted for that possibility.

In this episode, Mike McCracken examines what both failures share, and what the emergency management world has understood about compounding crises for decades. The doctrine exists. Most organizations have never heard of it.

Deep Dive available:  bluetogray.beehiiv.com

Southwind Planning website:  www.southwindplanning.com

www.southwindplanning.com

www.bluetogray.beehiiv.com

Send us Fan Mail

www.southwindplanning.com

www.bluetogray.beehiiv.com