YOU WILL NOT GET ENOUGH BUDGET WHEN YOU ARE NOT ADDRESSING RISKS IN A PROPER WAY: HERE ARE 5 MISTAKES YOU SHOULD AVOID.
David Knauer
Managed Data Services and Managed Security Services fitting to your Organisation. Data-centric Cybersecurity with a very human-centric Service. #NewSchoolOfSecurity
1. You don't speak the managements language.
Why is that a problem?
Nobody buys something he/she doesn't understand and value.
The solution?
Speak a language a budget and risk owner speaks. RISKS & MONEY.
More in the post:
2. You are not presenting an accurate picture of the risks.
?????? ???? ???????? ?? ??????????????:
Nobody cares about generic contingencies and the management don't believe they are real risks.
?????? ????????????????:
Present an on-point overview about your SPECIFIC risks RIGHT NOW.
More in the post:
3. You don't quantify the risks and translate it into an amount of money.
???? ?????? ??????'?? ???????????????? ?????? ?????????? ?????? ?????????????????? ???? ???????? ???? ???????????? ???? ??????????, ?????? ??????'?? ?????? ???????????? ???????????? ?????? ??????????????????????????.
???????? ???? ?????? ???????????? ???????????????????? ???? ???? ???????? ?????? ??????????:
"?????? ??????'?? ?????????? ?????? ?????????????????????? ????????????????."
"?????? ?????? ?????? ???????????????????? ???? ???????????????? ?????????????? ???? ?????? ??????????."
?????? ????????????????:
Always quantify if you speak to the management.
More in the post:
领英推荐
4. You present too much information and technical details.
?????? ???? ???????? ?? ???????????????
A management don't care about feature bashing and "cool" technical stuff.
?????? ?????????????????
Just save it. Explain it like they are 15 years old.
More in the post:
5. You just show the risks without having an operational plan (incl. financials) how to mitigate the risks.
?????? ???? ???????? ?? ??????????????:
The management hears problems all the time. They want solutions and an operational plan to reach it.
?????? ????????????????:
Present an operational plan how to translate a risk into a solution.
More in the post:
If you address risks in this ways to the management, you will get more (or even enough) budget for your cybersecurity program. I would bet on it.
?? I am David.
??? My passion is developing the New School of Security.
?? Sharing is caring.
?? Join the New School of Security newsletter: https://t1p.de/jfgks