Many security leaders, at all levels, correctly focus on having a good strategy and executing against that. However, many teams confuse planning, or “strategic planning” with actual strategy. In other words, a plan is not a strategy. This short video explains this very clearly. A Plan Is Not a StrategySo, a strategy specifies a competitive outcome you wish to achieve, based on a coherent theory of winning. In the case of security the notion of a competitive outcome has multiple dimension...
