A narrative methodology for turning security findings into decisions executives act on. Debuted as the closing keynote at RVAsec 15, June 2026.
Security teams are trained to find risk. We are rarely trained for the part that comes after: walking into a boardroom and turning the finding into a decision a CFO can act on by Friday.
The Saga Framework is a methodology for closing that gap. It gives security practitioners a library of story patterns drawn from mythology — patterns that already match the work we do — and a five-step method for applying them to any finding in your queue, including the ones you have been avoiding.
It is not storytelling for storytelling's sake. It is a decision-engineering tool that uses narrative as the structural scaffold for executive communication.
If you have ever delivered a finding you knew would not get actioned, the framework is built for you.
Ready to use it Monday? The complete methodology is yours by request
The talk-friendly version of the framework. Five steps you can run on any finding, starting Monday:
The framework's pattern library. Each archetype matches a recurring shape that security work actually takes:
The full manual develops each archetype with structural patterns, language templates, worked examples, and guidance on when to use which.
The Full Framework Manual -The complete methodology: archetype patterns, the Three Pillars, the Mythology Dial, plus field-ready worksheets and a 15-minute quick path. Available by request.
The research, the three pillars, and the case for narrative in security communication.
One page: pick your archetype, set the dial, build a board-ready ask in minutes.
First presented as the closing keynote at RVAsec 15 (June 2026), in a talk titled "Use It Monday: A 5-Step Method for Turning Security Findings Into Stories Executives Act On." The Saga Framework is the flagship methodology of Basilisk Security Advisory, founded by Victoria Mosby. She has spent her career on the receiving end of security findings: reviewing the reports after they land, sitting in the rooms where they get handed to executives, watching what happens in the ninety seconds after someone hits the last slide. The framework is the synthesis of what she has seen succeed and what she has seen die.