# Bradley Richards

Bradley Richards shares cybersecurity commentary from a customer success perspective, connecting topics such as ransomware, identity security, and patching to organizational resilience and trust.

- Profile: https://b2binfluencer.marketing/creators/bradley-richards/
- LinkedIn: https://www.linkedin.com/in/bradleyarichards
- LinkedIn followers: 580
- Topics: customer-success, vulnerability-management, identity-security, incident-response, ransomware
- Based on 14 dated posts, latest 2026-10-08

## Summary

They are most useful for managerial cybersecurity commentary linking threats to resilience, response, and trust.

- Best for: A cybersecurity MSSP or vendor seeking managerial thought leadership on ransomware and identity security.
- Not for: Technical launch campaigns needing configuration guidance, original data, or guaranteed reach.
- Check first: Confirm deliverables, disclosure, approval, rates, and audience analytics before committing.

### Takeaways

- Security maturity comes from operational discipline, not tool spending alone.
- The access attackers want is trusted access.
- Recovery decisions should be made before the incident.

## Main ideas

- **Security maturity comes from operational discipline, not tool spending alone**: Richards argues that many incidents begin with gaps organizations already knew about. The key questions are whether known vulnerabilities are found, prioritized and fixed, and whether basic habits are repeated. In smaller organizations, delayed updates, reused passwords, untested backups and optional phishing training create opportunity; attackers choose targets by opportunity, not only by company size. They frame security maturity as consistent execution rather than one large initiative.
- **The access attackers want is trusted access**: Richards shifts attention from malicious software to identity. If attackers can use compromised domain credentials, Active Directory Group Policy or privileged admin accounts, they can operate with the same tools as an IT team and disable controls. Stolen employee directory data from Azure and Entra can make phishing more convincing by mapping reporting lines, service accounts and administrators. They prioritize privileged-account protection, identity protection and recovery readiness alongside employee awareness.
- **Recovery decisions should be made before the incident**: Richards argues that incident-response decisions made under pressure carry business risk. Organizations without trusted recovery, legal, insurance and security partners may have to make critical choices with incomplete information and little time. Cyber resilience therefore includes knowing who will guide the response, not just preventing the initial breach.
- **Communication is part of incident response because trust outlasts the breach**: Richards argues that breaches create headlines, but trust determines what happens afterward. How leaders engage customers, employees and stakeholders during uncertainty can shape trust for years, and communication can matter as much as technical response. They cite a line from Aida Keehner's personal message — "Technology changes. Contracts change. Relationships endure." — to connect incident response to customer success. The line is Keehner's, used to frame the lesson.

## Work to read

- [Breaches create headlines. Trust determines what happens afterward.](https://www.linkedin.com/posts/bradleyarichards_breaches-create-headlines-trust-determines-activity-7510323674474848256-BfLv)
- [MFA alone is not enough: known Fortinet VPN vulnerabilities](https://www.linkedin.com/posts/bradleyarichards_techdecanter-cybersecurity-ransomware-activity-7493638741564096512-56Ch)
- [When ransomware uses your own admin tools](https://www.linkedin.com/posts/bradleyarichards_cybersecurity-techdecanter-cybersecurity-activity-7508854791326932992-NC9H)
- [Compromised identity data fuels social engineering](https://www.linkedin.com/posts/bradleyarichards_techdecanter-identitysecurity-entraid-activity-7498042762810855424-pVAI)
- [Ransom Busters and the risk of recovery decisions under pressure](https://www.linkedin.com/posts/bradleyarichards_ransomware-cyberresilience-incidentresponse-activity-7496612126669721601-6YWd)
- [The most expensive cybersecurity mistake may be believing you're too small to be targeted](https://www.linkedin.com/posts/bradleyarichards_techdecanter-smallbusiness-cybersecurity-activity-7495088293412429825-26qS)

## Brand relationships

- **Atruent** (disclosed_partnership)
- **Tech Decanter** (mention)

## Partnerships

Bradley Richards does not publish a partnership program, sponsorship menu, rate card, or official inquiry route in the posts here. They regularly comment on cybersecurity, reference Atruent as company context, and link to Tech Decanter newsletter issues featuring Aida Keehner, but do not disclose paid formats, terms, or deliverables. Treat any arrangement as a direct, individually negotiated conversation rather than a listed product. Before committing, ask about deliverables, disclosure, approval, timing, usage rights, and measurement terms.

## Alternatives

- Swati Gupta: Choose Swati Gupta for the same MSSP thought-leadership pilot when the buyer is a small-business owner rather than a security executive and the campaign needs blunt, high-contrast education on identity and ransomware. The posts argue that trust is the attack vector and identity is the front door, cite compromised credentials and AI-enabled attack rates, and explain why paying a ransom leaves no proof of deletion, restoration, or safety from a second attack.
- Salman Hussain: Choose Salman Hussain when the pilot should center on executive impersonation, business email compromise, and AI-era verification rather than ransomware recovery. The posts give compact leadership checklists: verify financial requests through an independent channel, use dual approvals and segregation of duties, train employees on deepfakes, and assess executives' public exposure. A second post extends the same practical tone into AI transparency and consent around browser-deployed models.
- Jason Edwards: Choose Jason Edwards when the campaign needs a long-form incident story or a training-and-certification angle for security operations and help-desk leaders. The MGM post walks through how a service-desk reset became the access path, names Scattered Spider/UNC3944 and ALPHV/BlackCat, and frames the help desk as a human-operated identity control plane. The CCOA post shows how to package audio, a study guide, and flashcards for busy analysts.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/