Mindset

The more I work In security and technology, the more I find striking how often complexity creeps in. Teams demand more resources, individuals seek out more tooling, and budgets quadruple, all in the name of improvement. Yet, this often leads to mental fatigue and complex processes, ultimately hindering true progress. I'm constantly trying to find ways to streamline processes and embrace minimalism.

A few weeks ago, as the team and I were trying to figure out what we could automate and simplify as part of a nimbler security approach, a quote that was driven to us when I was in the military came back to the surface:

"This is what we have, and with this we will win."

Back then, we worked in small teams, with minimal resources that demanded a very adaptable approach. We relied on our training and the efficient use of our existing tools.

That mindset stayed with me for a while, but the more I worked in larger enterprises and bigger teams, the more complacency creeped in. However, that changed about seven years or so ago, when I was asked to lead a security team with very little to work with, but a great deal of stuff to be accomplished.

Today this approach is more important than ever, with companies big and small trying to become more efficient and cut spending. While security can’t always be done on the cheap, it can remain nimble and agile, focusing on using what’s available and force-multiply from there.

Success with existing resources and tools is achievable, and while it demands a shift in mindset and strategic adjustments, especially in big and old-school organizations, the benefits are noticeable over time.

I think it’s really important for the security and technology fields to focus on minimalism and small-team tactics. Work with what you have, automate, and rely on other technical teams to help.