Interesting article in today’s Computerworld feed. Something that I’ve been harping about to my peers for some number of years - and anyone that would listen – is the concept of Knowing the Business of Information Security. As Mary Brandel points out in her article, “The Team at the Top”, it is becoming increasingly important for the technology leaders at the top tiers to not only be good Technologists, but to also be good Business people.
The things that have always bugged me is that with stove-piped or otherwise narrowly defined organizational structures, the technology guys & gals are not really that cognizant of what they are actually supporting. Sure – if you ask them what they “do”, they will say: “I’m a Network Engineer”, or “I’m a Security Analyst”, or “I’m a Software development Manger”. What they all fail to indicate is their relationship to the Company.
What they actually should focus on is that relationship. When asked – the answer should always be: “I’m here to support the Business in meeting their goals within their requirements”. Anything you do to support that is a function of your job, but it’s not your job. Semantics? Maybe – but as Mary points out – top level leadership are looking for individuals that can walk and chew gum at the same time. This basically means that you absolutely must be able to speak the language of Business, and secure / operation / maintain the IT infrastructure while at the same time maintain focus on what it is that you are really doing – helping the Business make money.
To remain solely a technological asset, at least at the upper tiers of administration, is not a future looking mode, and will guarantee that you become irrelevant in the near and long term.
No comments:
Post a Comment