I build security programs from nothing. Then I translate them for the people who pay for them.
Nine security domains, built from zero, through 174% company growth: SOC 2 Type II, HIPAA, NIST 800-171, zero major findings. This is where I write down how, for the people who fund security and the people who build it.
What security says
"We have critical CVEs in our external attack surface with no compensating controls."
→
What the executive hears
"Three internet-facing systems carry a roughly 15% annual chance of a $2M loss event. Fixing them costs $80K. Fund, accept, or transfer?"
The publication covers twelve technical and leadership pillars. The personal writing draws from five domains. Every post lives somewhere on this map.
The 12 content pillars
The 5 personal domains
Where the stories come from: building programs from nothing, the translation act itself, the human side of leading, compliance as trust, and a path that ran Air Force → teaching → IT → consultancy → MDR leadership.
The newsletter
Latest from Security Translated.
Pulled live from the Substack feed. Every issue serves both altitudes: leadership framing on top, implementation underneath.
Recent issues
Never miss an issue
One topic, translated both ways
A framework the people funding security will understand, and something the people building it can ship. No filler, no vendor spin.
Four complete, standalone templates. Each asks for an email so the files can land in your inbox and I can send you the updated version when it changes. Free to share with attribution; not for resale.
The templates
The honest pitch
These work on their own.
No trial, no upsell wall, no credit card. If a template tells you everything's fine, believe it and move on. The fastest way to show you how I think is to hand you something I actually use.
Every product line follows the same shape: a free asset that finds your gaps, the newsletter that keeps you sharp, and a paid playbook that closes them. Four free templates are live now. The paid products are in production.
How the funnels work
The full catalog · all 12 pillars
Every pillar gets the same treatment eventually. Here's what exists today, and what's coming.
Pillar
Free asset
Paid product
The 5 personal domains
Domain
Free asset
Paid product
Not sure where to start?
Take the free template first.
Every paid product upgrades a free one. Run the free version. If it finds gaps, the paid version is how you close them. If it doesn't, you just saved money.
Who writes this
Priscilla Lopez. Ciber Cazadora.
Director of Information Security. I build security programs from zero that pass audits and earn trust. Nine domains, SOC 2 Type II, HIPAA, NIST 800-171, zero major findings. CISSP, GCPN, CEH, CHFI, Network+. USAF veteran. Phoenix, Arizona.
Straight answers
0
Major findings across SOC 2 Type II, HIPAA, NIST 800-171
9
Security domains built from zero
95%
CMMC Level 2 alignment on first assessment
6 yrs
USAF, Secret clearance (inactive), zero safety or compliance failures
The full record
Projects, timeline, certifications, and speaking live on the portfolio.
Rather than keep two copies of the same career in sync, the detail lives in one place. This site is the publication; that one is the person.