This is similar to a point that I have been trying to make when I teach others about Security. Here is a talking point from a presentation I made to a local security conference:
Effective Security and Defense comes from the Future.
- Security is a meaningful assurance that your goals are being accomplished.
- The details are transitory. But, without goals, security has no point.
- Sticking to your goals when attacked is the heart of defense. Ultimately, it is the only thing that matters in security.
- Your organization adds value by sticking to it’s goals. But this is more than just a matter of value added.
- Goals are the spirit of the organization.
- If you don’t stick to your goals when attacked, then you have lost. The attacker may not have won, but you have lost.
We begin to create security when we teach Security folks how to support institutional goals.
One way we can do this is by going to meetings, keeping our mouths shut, listening to others, and occasionally asking:
- What is best for US?
- How can things be better?
- How do we want to be remembered?
