Enabling the organization to make decisions with security in-mind is the primary goal for any security team. Security is an important function of an organization, the opportunities we have to influence the organization are often far and few between. In order to enable you, the security leader, and to get you a seat at the table, you must align your security team to the business for the greater good of the organization.
It sounds easy, right? We tell them what they need, and they do what we ask? Right? Wrong! It's quite the opposite, the organization tells you where they are heading and you, the security leader, need to clear the path forward to ensure the organizations mission and their journey is secure.
Strategy at its highest level is understanding your current state and the path forward to reaching your desired future state. There are factors that influence the steps that must be taken to achieve your desired future state. Overlooking these factors can impact the outcome and effectiveness of your strategy.
So how do we do it?