You have to create a strategic plan knowing that there’s a high likelihood it will change. Does that mean you shouldn’t plan? Absolutely not,” says Mark Lex, Security Executive Council faculty member and former director of security for Abbott Labs. Over his career, Lex learned through hard-won experience that security strategic planning, done well, incorporates a balance of anticipation and response, detail and flexibility.
In today’s business landscape, that balance is extremely difficult to strike. Perhaps that’s one reason so few security and risk leaders succeed at effective strategic planning, and so many don’t plan at all. Here are some other possibilities.