The Storytelling Framework

A communication framework for security professionals who want their work to be understood, remembered, and acted on.

The Storytelling Framework is a practical toolkit I designed to help security teams communicate with clarity, confidence, and impact.

Instead of relying on dense reports or slide decks that disappear after the meeting, this framework turns complex cybersecurity topics into structured narratives built around archetypes, character roles, and myth inspired patterns.

The goal is simple: help technical teams tell better stories about risk, incidents, and programs so executives actually understand what matters and what to do next.

What’s Inside

  • A full whitepaper explaining the storytelling model and its foundations

  • A practical Practitioner’s Toolkit with templates, archetypes, and narrative structures

  • Character roles and story patterns designed for incidents, compliance programs, and risk reporting

  • Examples and exercises for turning technical material into executive ready narratives

Who It’s For

  • Security practitioners who struggle to explain complex findings to non technical audiences

  • Engineers and analysts who want their work to influence decisions, not just fill reports

  • GRC and risk leaders presenting to boards, auditors, and executive teams

  • Anyone who believes communication is as critical to security as controls and tooling

Why I Built This

After years of watching excellent security work fail to land, I realized the problem was rarely technical.

Great programs stalled because executives could not see the story. Important findings were ignored because nobody understood the stakes. Brilliant engineers struggled to influence decisions because their message got lost in translation.

I built The Storytelling Framework as an experiment.

What if security professionals were taught to communicate like storytellers? What if incidents, audits, and risk assessments were structured as narratives instead of bullet points?

This framework is my attempt to bridge the gap between technical depth and executive understanding.

What This Shows About How I Think

This project reflects how I approach leadership and product design:

  • Communication is a core security control, not a soft skill

  • Adoption and influence matter more than perfect documentation

  • Story is one of the most powerful tools for driving change

  • Security succeeds when strategy, execution, and communication are aligned

It sits at the intersection of security, education, and systems thinking.

Explore the Framework

If you’re interested in experimenting with narrative as a security leadership tool, you can download both resources below.

I welcome feedback, comments, and collaboration. Each document allows inline comments, and I love hearing how others are adapting the framework in their own programs.

Previous
Previous

Compliance Dungeon - Gamified GRC

Next
Next

The Archivist Translator: Cyber Storytelling Tool