Information security has become a highly relevant topic in our country for some time now. This is largely due to the growing number of leaks and cyberattacks that have successfully targeted various companies, government agencies, and public institutions. A simple Google search reveals an abundance of news stories, suggesting that many are still not fully prepared to face today\u2019s cybersecurity challenges.<\/p>\n\n\n\n
These recent incidents not only create chaos, but also force organizations to undergo drastic changes. There\u2019s no greater motivator for improving security than a successful\u2014and especially public\u2014attack. It\u2019s a bit like that neighbor who suddenly installs bars on their windows even though they never had them before.<\/p>\n\n\n\n
It\u2019s also worth noting that security roles\u2014the professionals responsible for protecting organizations from cybercriminals\u2014have certain peculiarities that make them particularly challenging positions within the business context.<\/p>\n\n\n\n
Implementing security controls, by definition, involves change\u2014and change is rarely\nfrictionless, especially when it affects day-to-day operations. Security measures in\nparticular often meet resistance, making those responsible for enforcing them some of\nthe least popular figures in an organization, as they tend to go against the ease and\nconvenience people are used to. It\u2019s similar to construction: years ago, workers might\nhave operated without helmets\u2014certainly more comfortable\u2014but today, allowing that\nwould be unthinkable.<\/p>\n\n\n\n
Sometimes, the balance tips too far in the other direction, and the business ends up\nworking for security rather than the other way around. The organization\u2019s core\npurpose\u2014whatever that may be\u2014gets lost. It\u2019s important to remember that security\nmust support the achievement of organizational goals. After all, without the business,\nthere\u2019s nothing to protect. We can\u2019t ban people from walking in public just because\ntraffic accidents are a risk; instead, we build traffic lights to help people move safely\ntoward their destinations.<\/p>\n\n\n\n
If security is meant to serve the business, but its approach is unrealistic, then it\u2019s not\nreally useful either. As with any aspect of life, proportionality is key\u2014in this case,\nproportional to risk.\nIdeally, it would be great to have the latest technologies and the most robust\n\nprocedures in place. However, the level of risk may not justify the time and financial\ninvestment required to implement those controls.\nWe can think that a reinforced steel door would be great for your home\u2014and sure, it\nwould\u2014but that doesn\u2019t mean it\u2019s practical or makes sense in most situations.<\/p>\n\n\n\n
The business. The business. The business always comes first.\nIn many cases, if the cost of a security initiative is lower than the potential risk, then it\nmay seem viable to implement it. That\u2019s a valid approach\u2014as long as all associated\ncosts are taken into account: financial, operational, organizational, maintenance-\nrelated, and more. As one might guess, all those elements that make up the total cost are also part of the\nbusiness\u2014and you can\u2019t afford to impact them without a solid reason.<\/p>\n\n\n\n
Someone once said that if you don\u2019t adapt to the organizational culture, it will consume\nyou. While this phrase is usually about individuals adapting, we can all recall a new\ninitiative or department within an organization that failed\u2014either because it was too\nambitious or it simply didn\u2019t fit in.<\/p>\n\n\n\n
Cybersecurity must adapt as well\u2014otherwise, it will be swallowed by the culture. It\u2019s a\nmutual agreement, but security must adapt more. Success in protection lies in this\nadaptability: instead of resisting how things work, security should accompany and\nenable change.<\/p>\n\n\n\n
We need to change how security is perceived within organizations. When done right, it\nisn\u2019t a burden\u2014it\u2019s a support. Rather than blocking the path, it should be the guardrail\nthat keeps us from going off the edge. For the business and in service of the business,\nthe right kind of security doesn\u2019t create discomfort\u2014it provides peace of mind.<\/p>","protected":false},"excerpt":{"rendered":"
Situaci\u00f3n La seguridad de la informaci\u00f3n est\u00e1 siendo un tema muy relevante desde hace un tiempo en nuestro pa\u00eds. Esto se debe a la creciente difusi\u00f3n de filtraciones y ataques que han tenido \u00e9xito en distintas empresas, organismos e instituciones del estado. Basta con hacer una b\u00fasqueda en Google para encontrarse con que abundan las […]<\/p>\n","protected":false},"author":15,"featured_media":6558,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"nf_dc_page":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[48],"tags":[],"class_list":["post-6556","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":{"bajada":""},"yoast_head":"\n