Other ingredients for a successful strategy

There are a bunch of management-related work that needs to be done to ensure the CISO, the security team, and the rest of the organization can effectively execute a cybersecurity strategy. This section outlines some of the ingredients that give a strategy the best chance of success.

For example, CISOs that tell the businesses they support, "no, you can't do that," are no longer in high demand. Security teams must align with their organizations' business objectives, or they won't be successful. Let’s take a closer look at this ingredient.

Business objective alignment

I've met many CISOs that were struggling in their roles. Some of them simply weren't properly supported by their organizations. It's easy to find groups of executives that think cybersecurity threats are overblown and everything their CISO does is a tax on what they are trying to accomplish. To these folks, cybersecurity is just another...