Have a small team of capable security professionals being used as force multipliers. We have the responsibility of protecting the business and our core assets.
Simplify the use and understanding of security. Making security have a clear purpose and function.
Create security solutions that enable us and our partners to mitigate security risk. Provide education and a clear risk communication to leadership and help employees become security force multipliers.
Reduce the complexity of having many vendors by focusing on key pieces of technology that give the biggest bang for the money.
We need to plan for the most obvious security issues, and the worse case scenarios as well. Stress testing the plans is a must, however those plans need to be fluid and agile, allowing for real life to be factored in. Constantly revisit the plans and procedures.