In Tough Times, Be Efficient Not Cheap

  1. Building everything yourself is even less of a wise choice today, than it was 4 months ago. The cyber security market was already facing pressures on staffing long before the Covid-19 virus swept the globe. Building an empire in your cyber security team is and will continue to be a terrible idea. Our current economic situation is forcing your hand. Security leaders must look to strategically partner with managed providers, staffing agencies, and their vendors to leverage that power to stay small, keep your cyber workforce focused on strategic initiatives to the business, and keep the adversaries at bay. But choose wisely, remember look for efficiency, versus just the cheap provider.
  2. Look for value, not simply low-cost in your partners and vendors. Frankly, finding cheap alternatives to things you buy today and vendors you already use would be pretty easy. The problem, as you already know, is that it would likely end in disaster. But that doesn’t mean you shouldn’t be seriously working on cutting your costs, quite the opposite. If you didn’t have an initiative to bolster effectiveness from your tools, staff, and providers before — now you must. It’s good business sense, and now it might very well be a survival tactic.
  3. Focus on managing cost, reducing complexity, and increasing efficacy going forward. It’s been my soapbox for a few years now, but today is more important than ever before in my lifetime. Managing isn’t the same thing as reducing; but it may mean that you cut cost in one area to make room for innovation in another with a net $0 increase. It’s possible. I have been a part of strategies that executed on exactly this, and I know many of you have been as well. Share that knowledge. Reducing complexity is good for security, and it’s good for cost management so it feels like a no-brainer to me. But cloud computing, IoT/IIoT, and the piles of legacy we’re still dragging behind us have made reducing complexity that project you save for the next person…well, get after it. Today. Increasing efficacy should always be a project. It’s continuous improvement, and the very heart of what wise leaders I’ve learned from over the last 20 years have worked towards. All three of these things are tied together… and I suspect I’ll write on these three over the next few posts so stay tuned.

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Rafal Los

Rafal Los

I’m Rafal, and I’m a 20+ year veteran of the Cyber Security and technology space. I tend to think with a wide-angle lens, and am unapologetically no-bullsh*t.