Archistry

Survivability by Design™ since 2006

  • Home
  • About
    • Who Is Andrew?
    • C2T System™
    • The Agile Security System™
  • Contact
You are here: Home / Archistry Daily / “The business” doesn’t care about cybersecurity

August 20, 2019

“The business” doesn’t care about cybersecurity

I recently had a conversation with someone who was lamenting about how difficult it was to connect and to communicate with “the business”—you know, the “everyone who isn’t in IT or Security” part of the organization…

…that same organization you’re busting your backside every day to protect and keep safe.

Yeah, those people.

Now maybe you don’t have this problem. So if that’s the case, you can stop reading now. The rest of the email isn’t going to matter to you.

However, if you do have this problem, the good news is that it’s solvable. And actually, while it’s easier to say than it is to do, it’s not really all that hard to do either.

Instead of talking to “the bidness” about security, information security, cybersecurity, breaches, vulnerabilities, phishing or any of those things at the forefront of our minds and on the tip of our tongues…

Stop.

Just stop. Take a deep breath, and think for a minute.

Think about what is of value to the people you’re trying to connect with. Do you know? Have you asked? Have you done your homework?

Have you figured out what commitments they’ve made to everyone else that they might not be able to meet if they don’t have your support?

If not, do not pass go, do not collect $200, and do not do anything else—I mean ANYTHING else…until you’ve figured that out.

If you don’t know where to start, or how to formulate some great questions about what they value, you can find some practical guidance in the September print issue of the Security Sanity™ newsletter.

It goes into some common questions about really connecting and engaging with stakeholders, da bizness and those pesky customers security has but finds it hard to give enough love. Questions like:

  • How do I know who to interview?
  • Where am I supposed to find the information to prepare for the interview?
  • What to do if they won’t meet me?

and the biggest one that is the ultimate key to being able to understand, communicate and deliver the value of security, effectively and consistently—all the time:

How do I know what questions I should ask?

So if you’d like to have the answers to those questions, then I suggest you scoot on over to this link and subscribe: https://securitysanity.com

That “magic connection to the business” pill isn’t just going to be offered to you by some guy in cool sunglasses and a long leather jacket. You need to take it when you find it.

Stay safe,

ast
—
Andrew S. Townley
Archistry Chief Executive

Article by Andrew Townley / Archistry Daily / Agile Security, Cybersecurity, Stakeholder Credibility, Stakeholder Engagement, Stakeholder Interviewing

  • Email
  • LinkedIn
  • Twitter
  • YouTube

EMAIL NEWSLETTER

Want to get DAILY email tips on how to build a more effective security program so you can prove your security investments deliver value to the business?

You can always unsubscribe at any time, and we won't sell your data to third parties.

About Us

Archistry works with you to ensure what you want to achieve actually gets done, linking strategy, risk, governance and compliance to enable sustained exceptional performance Read More…

Testimonials

Andrew is a highly skilled and experienced information systems architect and consultant, which in my view is a rare thing. He is innovative in his thinking and merits the title of 'thought leader' in his specialist domains of knowledge—in particular the management of risk. Andrew has embraced SABSA as a framework and, in doing so, has been a significant contributor to extending the SABSA body of knowledge."

— John Sherwood, Chief SABSA Architect

"Fabulous person to work with. Very engaging and insightful. Extremely good technical knowledge with ability to relate concepts together and overcome differing opinions. Makes things work."

— Kevin Howe-Patterson, Chief Architect, Nortel - Wireless Data Services

"Andrew was able to bring clarity and great depth of knowledge to the table. His breadth of thinking and understanding of the business and technical issues along with a clear and effective communication style were of great benefit in moving the process forward towards a successful conclusion."

— Doug Reynolds, Product Manager, MobileAware

"Andrew is a fabulous consultant and presenter that you simply enjoy listening to, as he manages to develop highly sophisticated subjects in very understandable way. His experience is actually surprising and his thoughts leave you without considerable arguments for any doubts in the subjects he covers."

— Biljana Cerin, Director, Information Security and Compliance

Recent Posts

  • If you want better security, you’d better have a better security architecture
  • The ultimate security song to keep you focused on what you’re doing
  • Security heroes
  • There’s always a people problem
  • Putting your data flow diagrams out to pasture…for good

Looking for something else?

  • Home
  • About
  • Contact

  • Terms of Service
  • Privacy Policy
  • Cookie Policy
  • Copyright © 2006-2025 Archistry Incorporated or its affiliates

"Archistry", the stained glass window logo, "Pragmantix" and the Pragmantix™ logo, "Archistry Execution Framework (AEF)", "Archistry Execution Framework, Cybersecurity Edition (ACS)", "The Agile Security System", "The Agile Business System", "Baseline Perspectives", "Architecture Wall", "Archistry Execution Engine", "Renegade Security", "Renegade Security System", "Security Value Delivery System (SVDS)" "Collapse-to-Traction", "Collapse-to-Traction System", "Adaptive Trust & Governance Model (ATGM)", and "Adaptive Trust & Governance Model for Organizations (ATGM4O)" are trademarks of Archistry Incorporated or its affiliates.