Train your teams
A question or a challenge for anyone who has a security team in their org. It came off the back of a conversation about communication to Leadership and buy-in, and I don’t see it mentioned a lot.
If you don’t have some sort of Selling/Marketing/Storytelling/Presentation elements in their CPE plan? If it’s majority technical? You’re not setting them up for success. You’re making your job and your succession plan more difficult. Every day will be a battle harder than it needs to be. Stress levels will remain high if they can’t tell and sell a story.
Arguably this could apply to most of IT. I think in Security and Infosec it’s crucial. But possibly overlooked?
PS. Maybe not Wolf of Wall Street level, Exec don’t need the latest Quantum AI Blockchain enabled SIEM…but point still stands