![Security transformation leadership](https://miro.medium.com/v2/resize:fill:48:48/1*vQFbBoslhbjD8hR5FoCmPg.jpeg)
I’ve written extensively about the challenges and challenges that many large companies encounter when it comes to cybersecurity. endemic Implementation issues arise when it comes to protecting yourself from cyber threats.
Diagnosis is relatively possible, but clear In my opinion, there is one aspect that needs to be repeated, and it gives the whole picture of the problem in many companies.
You can’t expect a cybersecurity project to be successful in a company where the projects are generally underperforming. If there is no accountability for the original purpose. No one focuses on anything other than what is said to be an immediate success in any project.
When it comes to business projects, it all boils down to an established business concept. Return on investment, customer acquisition costs, time to market, etc. If the cost is too high, cancel or stop (or rebuild) the project. Either it’s too late or your business priorities have changed. You just cut your losses and everyone moves on. It happens all the time, and the decision can involve an investment of millions of dollars. This is an amount that many CISOs would like to have at their disposal in these companies, dwarfing the cost of most cybersecurity efforts.
Some companies are in constant upheaval, constantly churning out new initiatives despite those already underway, and constantly canceling or repositioning ongoing projects.
For some, it’s simply their way of working, an extreme take on Zuckerberg’s “break things fast” principle. This is often considered a sign of business health and market strength. As long as there is growth and profits are good, the people upstairs don’t really care.
At the other end of the spectrum, some companies exhibit similar symptoms for exactly the opposite reason. That’s because businesses struggle to keep the lights on and constantly grapple with existential threats.
Don’t expect your cybersecurity project to work. What I have highlighted here is the dominant business mindset.