Security leaders are consistently told to “align security with the business” But figuring how to do this successfully is often elusive. Security leaders need to understand and convey risks in one of these categories. The number one complaint I hear from security leaders is that they are in a continuous fire-fighting mode. The solutions more often involve people, process and organization rather than technical controls, expert says. Kent Anderson: Developing an effective business focus for security is not easy – it requires good political and organizational skills.”]
Source: https://www.cuinfosecurity.com/blogs/developing-business-focus-in-security-initiatives-p-376