Summary

This chapter has covered everything related to strategy for your cybersecurity program and the importance of having a defined strategy in place. The strategy is what defines the foundation for your cybersecurity program, and without one, you will have no destination to strive for.

As we briefly touched upon, the mechanism that drives and delivers that high-level strategy for your cybersecurity program will be roadmaps, and not just one, but multiple roadmaps for immediate, short-term, and long-term needs. Moving beyond the broad strategy for your cybersecurity organization, we covered in detail four core-level strategies that you need to spend dedicated time solidifying.

The first of the four strategies is your architecture strategy, which we broke down into two distinct areas: technical and strategic. In this chapter, we focused primarily on the architecture strategy for your cybersecurity program and for the broader organization. The additional strategic and technical...