I sometimes become overwhelmed by the amount of change that is occurring with all of the opportunities and all of the risks relating to securing our environment. It is much like dealing with my personal health (or lack thereof). Dieting, exercising. I need to do both, I see it will take me to a greater level of health, happiness and self-confidence, but the changes and work required causes me to sit on my couch and only think should, would, could. I am also a former coach and love John Wooden quotes like” Failure is not fatal, but failure to change might be.” So a couple weeks ago I tweaked my diet. Soon after that I started a cardio program at home 30-40 minutes a night. I lost 13 lbs, not at all where I want to be, but more energized now to continue. I did something, now can see opportunity to continue doing.
Your security program could follow the same approach. Where do I start? How do I get everyone on board? Start small, perform good things, build momentum. Another quote from “the coach” is “It's the little details that are vital. Little things make big things happen.” To pull heavy weight from a stopped position is difficult, but turning one revolution of the wheel at a time and you will build momentum, speed. Others may join you in the quest.
I started with the top security controls, looked into ITIL framework for the IT department, tore a couple pages from Agile project management and was surprisingly grateful for the HIPAA ruling. I joined the LegalSEC crowd and listened to success stories of others to build my task list. (So much power in these groups) I continually take advantage of small opportunities and every once in a while I see the needle move. I continue to try to do good, not so perfect, things and at least move toward the goal. I am not there, but continue to change should, would and could to DID.
“Do not let what you cannot do interfere with what you can do. – John Wooden”
I hope everyone gains success from ILTA and LegalSEC as I have, I prefer the journey amongst peers versus one alone.
#LegalSEC