Books that helped shape Black Swan Cyber Security Solutions
Black Swan Cyber Security Solutions was not shaped by cyber security textbooks alone.
Some of the clearest ideas behind how we think about risk, resilience, trust, communication and buyer education came from books outside the cyber world.
This page brings those ideas together – from Nassim Taleb’s work on uncertainty, to Chris Voss on negotiation under pressure, to Marcus Sheridan on answering the questions buyers are already asking.
Books that helped shape Black Swan Cyber Security Solutions
Black Swan Cyber Security Solutions was not shaped by cyber security textbooks alone.
Some of the clearest ideas behind how we think about risk, resilience, trust, communication and buyer education came from books outside the cyber world.
The books explain how we think, not just what we sell.
Many cyber security companies lead with products, acronyms and vendor badges. Those things can matter, but they are not the whole story.
At Black Swan Cyber Security Solutions, the bigger question is usually: how do we help smaller organisations make better decisions about risk?
That means thinking clearly about uncertainty, staying calm under pressure, answering awkward buyer questions, testing assumptions and building trust before a crisis arrives.
Four starting points for how Black Swan thinks
These are not cyber security manuals. That is part of the point. Some of the most useful cyber security lessons come from people who were thinking deeply about risk, negotiation, trust and influence long before they were applied to technology.
Nassim Nicholas Taleb and the Incerto
Taleb’s work shaped the name Black Swan Cyber Security Solutions and the way we think about rare, high-impact events.
In cyber security, the biggest risks are often the ones dismissed as unlikely until they suddenly become obvious: ransomware, supply chain compromise, failed backups, email account takeover or a hidden weakness nobody had tested.
Taleb’s books are a useful reminder that a quiet period is not proof of safety, and that resilience has to be tested before it is needed.
Chris Voss and Never Split the Difference
Chris Voss’s work on negotiation maps surprisingly well onto cyber incidents.
Ransomware demands, social engineering calls, fake supplier emails, cyber insurance claims and incident updates all involve pressure, incomplete information and people trying to influence decisions.
The lesson for cyber security is simple: slow down, ask better questions, avoid panic-led commitments and know who should speak before the pressure arrives.
Marcus Sheridan and They Ask, You Answer
Marcus Sheridan’s book helped shape the way we think about trust, plain-English advice and answering the questions buyers are already asking.
Cyber security buyers need clarity around cost, fit, risks, comparisons, Cyber Essentials, cyber insurance, backups, managed detection and what to avoid.
The lesson is not to hide from awkward questions. It is to answer them properly, so buyers can make better decisions before they ever speak to us.
Daniel Priestley and Key Person of Influence
Daniel Priestley’s Key Person of Influence helped shape how we think about visibility, trust and accountability in cyber security.
Not in a “personal brand for the sake of it” way. The useful lesson is that people want to understand who is behind a business, what they stand for, and why their advice is worth listening to.
In cyber security, that matters. Smaller organisations are not just buying tools. They are trusting someone to help them make decisions about risk, compliance, recovery, reputation and sometimes business survival.
For Black Swan Cyber Security Solutions, the lesson is simple: be clearer, be more useful, and make it easier for people to judge the advice before they ever become a customer.
Disclosure: some book links on this page are affiliate links. If you buy through them, Black Swan Cyber Security Solutions may receive a small commission at no extra cost to you.
What these books have in common
Different authors, different subjects, but the same useful themes keep showing up in how we talk about cyber security, build trust and help organisations make better decisions.
Risk is often misunderstood
A quiet period does not prove safety. It may just mean the weakness has not been tested yet.
Pressure changes decisions
People act differently when money, reputation, deadlines or fear are involved.
Trust has to be earned
Clear, honest answers beat vague promises and vendor-heavy language.
Hidden information matters
The overlooked detail often changes the whole picture: a backup gap, email rule, exposed account or supplier route.
Preparation beats panic
Good decisions are easier when the plan, evidence and responsibilities are already clear.
Two cyber security books that shaped how we think about people
These two books sit closer to the cyber security world, but they reinforce a message that matters far beyond technical teams: people are not the weakest link. They are part of the defence when they are supported properly.
Cybersecurity ABCs
Cybersecurity ABCs, by Jessica Barker, Adrian Davis, Bruce Hallas and Ciarán Mc Mahon, helped reinforce one of the most important ideas behind Black Swan Cyber Security Solutions: awareness on its own is not enough.
Telling people to “be careful” does not automatically change behaviour. A yearly training module does not create culture. Posters, slogans and phishing tests can all have a place, but they only work properly when they are part of something more joined up.
The useful lesson for smaller organisations is that cyber security needs to be practical, repeated and rooted in how people actually work. Staff need clear guidance, simple reporting routes, usable tools and a culture where they feel safe asking for help.
This book strongly aligns with our belief that people should not be treated as the weakest link. They should be helped to become a confident part of the organisation’s defence.
The Psychology of Cybersecurity
The Psychology of Cybersecurity, by Tarnveer Singh and Sarah Y. Zheng, looks at cyber security through the lens of human behaviour: how attackers think, how defenders make decisions, how people take the bait, and how pressure affects judgement.
That matters because many cyber attacks are not purely technical. Phishing, business email compromise, social engineering, fake payment requests and account takeovers often rely on trust, urgency, authority, distraction and helpfulness.
The lesson is not that people are careless. The lesson is that attackers understand people. They know how busy working days feel. They know how a convincing email, familiar name or urgent request can push someone into acting quickly.
For Black Swan, this reinforces the need for layered protection: better email security, multi-factor authentication, password managers, managed detection and response, tested backups and practical training that supports people rather than blaming them.
Books we may add to this list
This page will grow over time. Some books are already on our radar because they connect neatly to staff behaviour, near misses, cyber hygiene, trust and better decision-making.
Thinking, Fast and Slow
Daniel Kahneman’s work is a natural fit for phishing, urgency, social engineering and the difference between fast reactions and slower judgement.
Black Box Thinking
Matthew Syed’s ideas fit incident response, near-miss reviews, backup testing and building a culture where people report issues early.
Atomic Habits
James Clear’s book maps neatly onto cyber hygiene: MFA, password managers, payment checks, patching, backups and small repeatable behaviours.
Want to suggest a book?
If you are an author, publisher or reader who thinks a book belongs on this page, we are happy to take a look. We are especially interested in books that help smaller organisations think more clearly about risk, trust, resilience, communication, behaviour, leadership or cyber security.
Where a book is a good fit, we may review it and add a link from this page.
Want a cyber security partner who thinks beyond the tools?
We help smaller organisations understand their risk, improve their protection and make better cyber security decisions. Practical advice, clear communication and support that fits the real world.