Hope Is Not a (Security) Strategy
For anyone schooled in the sales discipline, this key tenet–hope is not a strategy–is at the core of consistent, predictable performance. The book has been around for some time but it still resonates today. This same notion applies to security and risk management. All too often, security teams are reacting to the latest threat, struggling with maintaining policies on their security gateways and buried in alerts and access control issues.