Incentives drive behavior, says John Defterios: What’s the incentive for doing security well? How do you even know if you’re doing security? He says security teams need to define proper incentives for a security team. Security teams should be incentivized to achieve mediocrity, he says. Incentive programs create alignment within organizations as well, he adds. Without that alignment, achieving security goals is mission impossible. Until we get a much better handle on incentives, folks will continue to ignore the need to secure things.”]
Source: https://www.darkreading.com/analytics/incentives-and-organizational-alignment-or-lack-thereof-