Five Principals of Effective Cybersecurity

  1. Every security decision is a business (not technical) decision.
  2. More spending doesn’t always make you more secure.
    Corollary: Every budget can – and should - afford some level of cyber protection.
  3. Solutions not customized for a specific business model will fail.
  4. You can’t improve what you don’t measure.
  5. People deliver results.