Free · 147 pages · Review edition 0.9
Enforce to Survive
Why enterprise resilience now requires effective enforcement
By Haim Sakal · CPA and anti-fraud specialist · 25 years of forensic investigation
Governance, risk and compliance are three of the four disciplines an organisation protects itself with. This book is about the fourth: the work of making sure that what an organisation has promised is what it actually does. It argues that enforcement can be defined, measured and built — and that as AI turns rare threats into common ones, it stops being a competitive advantage and becomes the condition for surviving the decade.
It is written by someone who has spent twenty-five years on the other side of the locked door, investigating fraud, misconduct and breaches at organisations that had every control in place and still learned what happened from a stranger.
Get the book
Free, and yours to keep. We will send you the next edition when it is revised, and nothing else unless you ask.
What is inside
Part One
The definition and the measure
What enforcement actually is, as distinct from what the dictionaries and the compliance literature say it is — and how to tell whether yours works.
Part Two
What stands in the way
Why investigations stall: the cost of working in silos, the witness who stays quiet, and how organisations keep learning what happened from a stranger.
Part Three
The enforcement function
Who should own it, where it sits, what it costs, and what an operating model looks like when enforcement is a discipline rather than a fire drill.
Part Four
The coming reckoning
What changes when the cost of a sophisticated attack collapses, and the rare threat on the risk register becomes the common one — outside the organisation and inside it.
Part Five
The choice
Why the organisation that builds this will outlast the one that does not.
Review edition
Tell us where it is wrong
The book is revised in the open, and each edition records what changed. If a chapter does not match what you see inside your own organisation, that is the thing worth sending — and it is what changes the next edition.
It goes to Haim Sakal, who wrote it. You do not need to have downloaded the book here, and you do not need to be polite about it.
Who it is for
General Counsel and legal operations, Chief Compliance Officers, CISOs and heads of security operations, heads of HR and employee relations who run misconduct investigations, and privacy counsel — the people who inherit enforcement without having asked for it. It is deliberately not written for forensic practitioners, who already know this material.