Mindset
Feb 2025
The more I work in security and technology, the more striking I find how often complexity creeps in. Teams demand more resources, individuals seek out more tooling, and budgets quadruple, all in the name of improvement. Yet this often leads to mental fatigue and complex processes that hinder true progress, so I keep looking for ways to streamline and embrace minimalism.
A few weeks ago, as the team and I tried to figure out what we could automate and simplify for a nimbler security approach, a quote from my time in the military came back to me:
"This is what we have, and with this we will win."
Back then, we worked in small teams with minimal resources, and that scarcity demanded an adaptable approach. We relied on our training and the efficient use of the tools we already had.
That mindset stayed with me for a while, but as I moved into larger enterprises and bigger teams, complacency crept in. That changed about seven years ago, when I was asked to lead a security team with very little to work with and a great deal to accomplish.
This approach is more important than ever, as companies big and small try to become more efficient and cut spending. Security can't always be done on the cheap, but it can stay nimble and agile, using what's available and force-multiplying from there.
Success with existing resources and tools is achievable. It demands a shift in mindset and strategic adjustments, especially in big and old-school organizations, but the benefits show over time.
The security and technology fields need to focus on minimalism and small-team tactics: work with what you have, automate, and rely on other technical teams to help.