Security People at Mid-Sized Companies
- Customer
- Whoever owns information security, usually alone
- Context
- Measured by things that do not happen
The Jobs of someone who must prevent what has not happened, inside an organisation that pays only for what has.
5 Jobs
- 01When I must protect the company's systems, I want to know what the company actually uses, so I do not defend a list that differs from reality.5 Pains · 5 Desired Outcomes · 5 Existing Solutions
- 02When I need people to work more safely, I want to change actual habits, so it does not stop at a training everyone clicks through.5 Pains · 5 Desired Outcomes · 5 Existing Solutions
- 03When a large customer sends a security questionnaire, I want to answer quickly and honestly, so a contract does not stall on paperwork.5 Pains · 5 Desired Outcomes · 5 Existing Solutions
- 04When an incident is underway, I want to know what to do first, so I do not lose the first hour finding out who decides.5 Pains · 5 Desired Outcomes · 5 Existing Solutions
- 05When the list is longer than the team can do, I want to pick the right work first, so I do not spread thin and finish nothing.5 Pains · 5 Desired Outcomes · 5 Existing Solutions
The four perspectives are for Pro Members
The Job statements in this Set are open to everyone. Pains, Desired Outcomes, Existing Solutions and Opportunity Gaps live inside the community, for Pro Members.
See Pro Member