Archistry

Survivability by Design™ since 2006

  • Home
  • About
    • Who Is Andrew?
    • C2T System™
    • The Agile Security System™
  • Contact
You are here: Home / Archistry Daily / Whaddya mean, “You don’t know what you want??!!”

August 5, 2019

Whaddya mean, “You don’t know what you want??!!”

One of the biggest complaints I hear over and over again about talking to stakeholders as part of a requirements gathering exercise is:

“They’re just lazy! They won’t just tell us what they want!”

Which is…

ridiculous.

Now, if it’s around lunchtime, and your belly is grumbling and the smell wafting through the open window is of sizzling, searing meat cooked on an open grill…

you might know exactly what you want.

If you’re a hard-core carnivore like myself, you’re thinking something along the lines of, “Damn! That smells great! I’d love a big, juicy burger right now!”

So, yeah, there are times when you do know what you want.

And so do your stakeholders. They know exactly what they want, at least to some degree. And this isn’t that hard to understand. In most cases, what they care about are bigger-picture items and objectives they’re trying to reach to deliver their part of the overall business strategy.

They know they want to be successful.

They know they want to add value to the organization.

Or they know that they need to sell 10,000,000 widgets this quarter to meet their targets.

But if you want to know what they want…from YOU?

They’re not going to have the foggiest notion of what that is. They don’t do your job. They want to keep the data safe, stay out of the newspapers, and not have to have you tell them “No” for the 7 millionth time.

Beyond that…

crickets.

And that’s actually ok. They’re not supposed to.

But it doesn’t mean you still don’t have to understand their world enough to figure out how you can help. They’re not supposed to tell you what security they need.

Who’s the expert again?

Um…yeah.

You.

But we often have trouble bridging that gap, nobody ends up happy, and everyone ends up pointing fingers at everyone else and saying how stupid they are because…

“They just don’t get it!”

Well, little camper, it’s time to change that.

If you want to know how to really understand what you need to do to enable and support any of the core customers you have as security – and build as strong of a professional relationship with them as possible – then you’ll want to make sure you subscribe to the print Security Sanity newsletter this month.

The whole issue is about how to do just that.

Subscription details are here: https://securitysanity.com

Stay safe,

ast
—
Andrew S. Townley
Archistry Chief Executive

Article by Andrew Townley / Archistry Daily / Agile Security, Requirements Gathering, Stakeholder Engagement

  • Email
  • LinkedIn
  • Twitter
  • YouTube

EMAIL NEWSLETTER

Want to get DAILY email tips on how to build a more effective security program so you can prove your security investments deliver value to the business?

You can always unsubscribe at any time, and we won't sell your data to third parties.

About Us

Archistry works with you to ensure what you want to achieve actually gets done, linking strategy, risk, governance and compliance to enable sustained exceptional performance Read More…

Testimonials

Andrew is a highly skilled and experienced information systems architect and consultant, which in my view is a rare thing. He is innovative in his thinking and merits the title of 'thought leader' in his specialist domains of knowledge—in particular the management of risk. Andrew has embraced SABSA as a framework and, in doing so, has been a significant contributor to extending the SABSA body of knowledge."

— John Sherwood, Chief SABSA Architect

"Fabulous person to work with. Very engaging and insightful. Extremely good technical knowledge with ability to relate concepts together and overcome differing opinions. Makes things work."

— Kevin Howe-Patterson, Chief Architect, Nortel - Wireless Data Services

"Andrew was able to bring clarity and great depth of knowledge to the table. His breadth of thinking and understanding of the business and technical issues along with a clear and effective communication style were of great benefit in moving the process forward towards a successful conclusion."

— Doug Reynolds, Product Manager, MobileAware

"Andrew is a fabulous consultant and presenter that you simply enjoy listening to, as he manages to develop highly sophisticated subjects in very understandable way. His experience is actually surprising and his thoughts leave you without considerable arguments for any doubts in the subjects he covers."

— Biljana Cerin, Director, Information Security and Compliance

Recent Posts

  • If you want better security, you’d better have a better security architecture
  • The ultimate security song to keep you focused on what you’re doing
  • Security heroes
  • There’s always a people problem
  • Putting your data flow diagrams out to pasture…for good

Looking for something else?

  • Home
  • About
  • Contact

  • Terms of Service
  • Privacy Policy
  • Cookie Policy
  • Copyright © 2006-2025 Archistry Incorporated or its affiliates

"Archistry", the stained glass window logo, "Pragmantix" and the Pragmantix™ logo, "Archistry Execution Framework (AEF)", "Archistry Execution Framework, Cybersecurity Edition (ACS)", "The Agile Security System", "The Agile Business System", "Baseline Perspectives", "Architecture Wall", "Archistry Execution Engine", "Renegade Security", "Renegade Security System", "Security Value Delivery System (SVDS)" "Collapse-to-Traction", "Collapse-to-Traction System", "Adaptive Trust & Governance Model (ATGM)", and "Adaptive Trust & Governance Model for Organizations (ATGM4O)" are trademarks of Archistry Incorporated or its affiliates.