Your Cybersecurity Dollar
Where do you actually spend your cybersecurity time and money? Salary? Hardware? Training? Consultants? AI? (Note that this question is not useful unless and until you have an effective, evidence-based Cybersecurity Program up and running.) Most of us don't actually know the answer to that question. Finding that answer is an interesting exercise that should be part of cybersecurity leader's annual to-do list. You can find out with these deceptively simple steps: Write out your group's priorities Match your budget to those priorities Match your actual spending to those priorities Match your person hours with those priorities The fact is that we all have a bit of a gap between what we think we value and what our actions indicate that we value. This gap tends to drift over time without conscious realignment, so regular checking is a good idea. But checking is, itself, neither cheap nor easy so only check when you are in a position to actually make good use of the data. If yo...