Security pros have to develop some level of situational awareness before they can determine what path to take. In the Korean War, fighter jet pilots used what has been dubbed the OODA loop. After you put on your new security shoes, you cant take a step until you know where youre going. You can tear down a business process, network topology or even system architecture to its core and rebuild it adding layers of security as you go. In this process, you gather data from all sources, the network administrators, line managers, and that goofy looking guy in the back corner.”]
Source: https://www.csoonline.com/article/2135584/shiny-new-security-shoes.html