Technology is the terrain on which security is fought; ISOs who do not understand it cannot navigate it, and those who do not watch its horizon will always be surprised by what appears over it.
Why This Tenet Matters #
The security landscape is inseparable from the technological landscape that underpins it. Every new platform adopted, every device connected, every service migrated to the cloud, and every emerging technology embraced by the business creates new dependencies, new vulnerabilities, and new categories of risk that yesterday’s controls may not adequately address. At the same time, the adversary community is organised, intelligent, agile, and well-resourced, continuously adapting its tools, techniques, and procedures to exploit whatever gaps the pace of technological change creates. ISOs who allow their technological understanding to stagnate, or who over-rely on automated tools to manage threats they no longer fully understand, will find themselves perpetually behind both the threat actors and the business they are trying to protect.
Core Concepts #
Strategic Technology Awareness #
The next-generation ISO is not expected to be a hands-on technical practitioner in every domain, but they are expected to maintain a sufficiently deep and current understanding of the organisation’s technological landscape to make informed strategic decisions. This requires a genuine curiosity about how technology works, a healthy scepticism about how well it performs in practice, and the analytical discipline to distinguish between what vendors promise and what tools actually deliver in a specific organisational context.
Strategic technology awareness means understanding not just what technology the organisation currently uses, but how dependent on it the organisation is, where its legacy systems create persistent risk, what emerging technologies are approaching that could either strengthen defences or introduce new vulnerabilities, and how the organisation’s technology ecosystem compares to the adversarial capabilities it faces.
The People and Process Dimension of Technology #
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
