Security Magazine logo
search
cart
facebook twitter linkedin youtube
  • Sign In
  • Create Account
  • Sign Out
  • My Account
Security Magazine logo
  • NEWS
    • Security Newswire
    • Technologies & Solutions
  • MANAGEMENT
    • Leadership Management
    • Enterprise Services
    • Security Education & Training
    • Logical Security
    • Security & Business Resilience
    • Profiles in Excellence
  • PHYSICAL
    • Access Management
    • Fire & Life Safety
    • Identity Management
    • Physical Security
    • Video Surveillance
    • Case Studies (Physical)
  • CYBER
    • Cybersecurity News
    • More
  • BLOG
  • COLUMNS
    • Career Intelligence
    • Cyber Tactics
    • Cybersecurity Education & Training
    • Leadership & Management
    • Security Talk
  • EXCLUSIVES
    • Annual Guarding Report
    • Most Influential People in Security
    • The Security Benchmark Report
    • Top Guard and Security Officer Companies
    • Top Cybersecurity Leaders
    • Women in Security
  • SECTORS
    • Arenas / Stadiums / Leagues / Entertainment
    • Banking/Finance/Insurance
    • Construction, Real Estate, Property Management
    • Education: K-12
    • Education: University
    • Government: Federal, State and Local
    • Hospitality & Casinos
    • Hospitals & Medical Centers
    • Infrastructure:Electric,Gas & Water
    • Ports: Sea, Land, & Air
    • Retail/Restaurants/Convenience
    • Transportation/Logistics/Supply Chain/Distribution/ Warehousing
  • EVENTS
    • Industry Events
    • Webinars
    • Solutions by Sector
    • Security 500 Conference
  • MEDIA
    • Interactive Spotlight
    • Photo Galleries
    • Podcasts
    • Polls
    • Videos
      • Cybersecurity & Geopolitical Discussion
      • Ask Me Anything (AMA) Series
  • MORE
    • Call for Entries
    • Classifieds & Job Listings
    • Newsletter
    • Sponsor Insights
    • Store
    • White Papers
  • EMAG
    • eMagazine
    • This Month's Content
    • Advertise
  • SIGN UP!
ColumnsCybersecurityManagementCyber Tactics ColumnSecurity Leadership and ManagementSecurity & Business Resilience

Cyber Tactics

Reflections on 35 years in the trenches

To stay ahead of our adversaries, cybersecurity leaders must continually innovate and prioritize proactive security.

By John McClurg
cyber security

your_photo / iStock / Getty Images Plus via Getty Images

cyber tactics author
cyber security
cyber tactics author
March 10, 2023

“May you live in interesting times” is a proverb that has resonated in my life over the last four decades as both a curse and blessing.

No small part of that valuation is attributable to the pace at which technology innovations have been advanced and now contribute to the quality and challenges of the lives we lead. Those advances came at a cost, none more notable than the degradation of the boundaries that traditionally defined our world and around which we constructed and imputed meaning to the environments churning around us. The associated porosity that attended that degradation has been exacerbated by the rise of the Internet of Things (IoT), in which our adversaries have discovered new and almost innumerable attack vectors through which to strike at our interests.

Our response to those attacks always aspired to be proactively preventative, but more times than not found itself stymied in the world of the reactive. Rather than being a guardrail at the top of the cliff, we found ourselves serving as an ambulance at the bottom. The associated costs of those efforts were not inconsequential and over time exacted such a toll on our businesses that we came to be perceived as a distasteful cost of doing business, reflected in complex structures often characterized as “defense in depth.” Those of us who sold into these structures appreciated them for what they really were: “expense in depth,” made necessary by a failure of signature-based anti-virus solutions deployed high in the kill chain.

With the rise of machine-learning-supported artificial intelligence (AI), deployed in the form of revolutionary endpoint protection and delivered at a price point that could achieve compliance while challenging old paradigms of defense, we saw the perception of our industry morph into that of being appreciated now as an indispensable and inextricable aspect of advancing the business. It’s that journey, that metamorphosis and its implications, that a good portion of my columns have explored over these last four years.

Our sense of being stuck in a never-ending cycle of whack-a-mole, reminiscent of the movie Groundhog Day, has potentially come to an end, including those unnecessary yet persistent instances of ransomware that claim the headlines of our day — if only more of us would step up and embrace the validated prowess of these new solutions. Too often those actions are interpreted as a foray down a “road less traveled.” In my career, taking that risk has been richly and consistently rewarded.

Even in the face of such strides, we know our adversaries will not stand by as we take the battle to them — too much money is at stake to acquiesce. They will continue to innovate. If we fail to sustain our cadence by taking steps like embracing structures of converged physical and cybersecurity operations, nation-states will strike at the gaps. Sustaining that effort has at times been sobering, particularly when punctuated by the realization that “no success at work will compensate for failure in our homes” — another proverb; that we can’t cut our way to profitability; and that we must, notwithstanding a persistent insider threat, trust and support our warfighters.

And after all we can do, our efforts will be for naught if we allow self-deception to creep in and undermine all that we might have otherwise achieved. Too much is at stake to allow that to happen. Thanks for your companionship on the journey. Best wishes to you on the road ahead.

 


KEYWORDS: artificial intelligence (AI) Chief Information Security Officer (CISO) cyber attack cyber security leadership cybercrime

Share This Story

Looking for a reprint of this article?
From high-res PDFs to custom plaques, order your copy today!

John mcclurg

John McClurg served as Sr. Vice President, CISO and Ambassador-At-Large in BlackBerry's/Cylance’s Office of Security & Trust. McClurg previously was CSO at Dell; Vice President of Global Security at Honeywell International, Lucent Technologies/Bell Laboratories; and in the U.S. Intelligence Community, as a twice-decorated member of the Federal Bureau of Investigation.

Recommended Content

JOIN TODAY
To unlock your recommendations.

Already have an account? Sign In

  • Cyber tech background

    Security’s Top Cybersecurity Leaders 2026

    Security magazine’s Top Cybersecurity Leaders 2026 award...
    Cybersecurity
  • Iintegration and use of emerging tools

    Future Proof Your Security Career with AI Skills

    AI’s evolution demands security leaders master...
    Columns
    By: Jerry J. Brennan and Joanne R. Pollock
  • The 2025 Security Benchmark Report

    The 2025 Security Benchmark Report

    The 2025 Security Benchmark Report surveys enterprise...
    The Security Benchmark Report
    By: Rachelle Blair-Frasier
Manage My Account
  • Security Newsletter
  • eMagazine Subscriptions
  • Manage My Preferences
  • Online Registration
  • Mobile App
  • Subscription Customer Service

More Videos

Popular Stories

Man on laptop

Healthcare Executives Face a New Era of Personal Risk

Man walking with briefcase

The Rising Tide of Executive Protection: Corporations Ramp Up Security in an Era of Heightened Threats

Stadium

Physical Security in Global Arenas: How AI Improves Security at Scale

Four people in suits

Mexico Security Crisis: Never Waste a Crisis

Digital Information Protected Secured

Taming the Threat Beast: Building a Threat-Led Cybersecurity Program

SEC 2026 Benchmark Banner
SEC 2026 Benchmark Banner

Events

April 21, 2026

The Blind Spot in Enterprise Security: Managing Workforce Risk Post-Hire

Organizations continuously monitor their networks and systems for risk, yet the people with legitimate access are often the least monitored part of the model. Discover a Workforce Risk Intelligence Framework that adds a dedicated layer focused on workforce risk.

April 30, 2026

Building a Campus-Wide Culture of Security and Shared Responsibility

In today’s higher education environment, where institutions face evolving and multifaceted incidents, safety must be embedded into the fabric of campus culture. Learn strategies for generating collective buy-in from faculty, staff, students and senior leadership. 

View All Submit An Event

Products

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

See More Products
SEC 2026 Top Cybersecurity Leaders

Related Articles

  • Cyber

    Have we declared “open season” on CISOs?

    See More
  • Cyber tactics

    2023: The year for contextual cyber threat intelligence

    See More
  • SEC0621-cyber-Feat-slide1_900px

    Reflections in the wake of RSA 2021: Cyber resiliency

    See More

Related Products

See More Products
  • Physical Security and Safety: A Field Guide for the Practitioner

  • Risk Analysis and the Security Survey, 4th Edition

  • security culture.webp

    Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

See More Products
×

Sign-up to receive top management & result-driven techniques in the industry.

Join over 20,000+ industry leaders who receive our premium content.

SIGN UP TODAY!
  • RESOURCES
    • Advertise
    • Contact Us
    • Store
    • Want More
  • SIGN UP TODAY
    • Create Account
    • eMagazine
    • Newsletter
    • Customer Service
    • Manage Preferences
  • SERVICES
    • Marketing Services
    • Reprints
    • Market Research
    • List Rental
    • Survey/Respondent Access
  • STAY CONNECTED
    • LinkedIn
    • Facebook
    • YouTube
    • X (Twitter)
  • PRIVACY
    • PRIVACY POLICY
    • TERMS & CONDITIONS
    • DO NOT SELL MY PERSONAL INFORMATION
    • PRIVACY REQUEST
    • ACCESSIBILITY

Copyright ©2026. All Rights Reserved BNP Media, Inc. and BNP Media II, LLC.

Design, CMS, Hosting & Web Development :: ePublishing