Security As Fuel: E or F?

My tendency is to fill the fuel tank when I see the yellow alert light on my speedometer. It takes a few days to refill the tank, depending on the price and my motivation to pay for it!

I tried a new approach, and it not only works wonders but also relates to security.

My mind is on alert once my car passes 60% fuel consumption. I keep an eye on the price and refill the tank when it’s 20-30% empty.

It does a few things:
– The approach doesn’t create urgency, which I sometimes had, regardless of the high price.
– It gives me enough buffer
– I fill up the tank with 30% less price. Not a definite benefit, but more psychological.

It struck me that security works in a similar way.

Most organisations don’t address security till they hit “E” with a breach or urgent compliance requirement. They delay and take lightly low-risk situations until they become high risk, or sometimes critical.

Security is a proactive game.
You don’t want to be full (F) all the time, or you exhaust the budget.
You don’t need to wait till last moment either.
You need to be just in between.

As Luke Ahmed 🚀 famously said, “How much security do you need? Just enough.”