When I speak with security executives privately about their challenges, one that I often hear is the pressure of time, budget and resources. They often find themselves in a situation where their budget is not aligned with their perceived risk. This leads to tactical decisions with no fundamental strategy or plan in place to mitigate this gap. Too often this may be a persistent problem leading to years of a Band-Aid approach to how they organize their people, their processes and how they deploy technology.
A recent case study at The Great Conversation delivered by one of the most respected hospitals in the country provided us insights into how this might happen.