So far we have discussed Engagement and Productivity, the first two pillars of an EPICC high performance team. Let’s continue exploring how to create an EPICC high performance security team, and look at the third pillar, Integrity. Integrity is the glue that holds an engaged and productive team together.
My two favorites definitions of integrity are doing the right thing even when no one is looking and doing what you say you will do long after the feeling you said it with has passed. That last one is what happens when, for example, you ask your friend to help you move and they say, “Sure anything to help…” but then the day comes to help you the last thing they want to do is move boxes and furniture. The person with integrity does it anyway because they said they would.
When members of a team have a what’s in it for me attitude, i.e. a lack of integrity, the team does not get very far. When it comes specifically to a security team, that is downright dangerous. In the world of cyber security, the team has to work well together if you want to stay ahead of the adversary. And if you don’t think you have any adversaries, remember that mistakes and errors internally can cause just as much damage to your organization. Your security team is on the front lines to prevent this and catch the errors or mistakes before they become costly or irreversible.
Your role in ensuring a team with integrity is to create an environment that establishes and supports integrity, and you do this by building a strong community. We have all seen what is possible when communities come together, whether after a natural disaster like a tornado, hurricane, or fire; or after a terrorist attack or violent incident. We have seen what is possible when neighbors help neighbors and the sense of community is strong. We have also seen the flip side with riots and looting that occur when a community is not strong and has a weak sense of integrity among its neighbors.
A community for your team means that everyone works together and no one is thinking what’s in it for me. When one member has a problem it is everyone’s problem, and that means the personal stuff gets addressed too. Because when someone is having trouble at home or outside of work it affects him or her at work. When they can come to work and know that it is safe to discuss with you or the team their focus will improve and so will their productivity.
No one wants to come to work and feel alone or worse suffer in silence, but people need to know it’s safe to share the personal stuff and the work stuff without fear of retribution, judgment, or scorn. You have to build this environment, set the rules of engagement, and make sure everyone knows where, when, and how to address the personal stuff and what will and won’t be tolerated, then lead by example.
Think about those communities where neighbors help neighbors and people have integrity. These Communities have greater property values, good schools, safe streets, and community activity. A team with high integrity members can get more accomplished, see problems ahead of time and bring projects in on time and on budget more easily. That brings value to the organization, which equates to your team having a high property value. When you provide continuing education you are offering good schools, the ability to share problems in a safe space is a safe neighborhood, and community activities means doing things outside of work from time to time. All of this helps build community and results in a high integrity and high performance team.
A low value community is rife with violence, low property values, lack of safety, and often are partly driven by fear. When this is the community of your team the violence shows up as in-fighting, backstabbing, and manipulation. When there is a lack of safety, people don’t share ideas, much less personal problems or challenges they are having with their work. All of this results in a team that does not work well together and ends up with a low property value within the organization.
Your security team is one of these two types of communities: they either have a high or low value within the organization, which will greatly depend on the type of community you have created. Start a conversation with your team about community, get to know your people, treat them with respect, and ask that they do the same. When you see something that might lead to a low value community, speak up and have the tough conversation about what needs to change. Lead by example and keep moving the team forward. Your security team is up against a lot of adversity as they protect your organization from faceless attackers, errors, and mistakes. They often only get feedback when something has gone wrong and rarely hear job well done. In order to keep them working together and in the right direction, integrity is going to be the glue that holds it all together.
If you have questions or comments about this article or the series you can reach out to me at sharon@c-suiteresults.com to discuss this topic, security teams, or security strategy. If you enjoy podcasts you can listen to C-Suite Success Radio to tap into the wisdom of other successful business people who know the path you’re traveling.
Because you are responsible for the strategy and success of your organization you are losing sleep over the continual reports of security breaches, stolen data, and ransomware. It appears that no one is safe anymore.
But all the terminology and acronyms (i.e., cloud, IoT, BOD, APT, IAM, IDS, Pen Test, malware, ransomware, identity access management, patch management, change management...not to mention all the compliance regulations) is overwhelming. And that makes sense because security is not in your wheelhouse, but it’s in mine! And I can help you!
WHAT I DO
As a 12-year veteran of the information security, audit, and compliance industry, I understand the technology your organization works with and the challenges you face.
I translate cyber security into business terms for executives who want to implement security but don’t know how. I help create the proper internal messaging, education, and shape the organizational culture needed for sustainable success in security.
Too many people believe that security is an IT problem and and that simply throwing budget at the IT department equals security. Instead, I help you paint a full picture of your security posture, the risks associated with it, and the most effective strategy to help close the gaps.
Security is not insurance - it is force protection (think of the armed guards in front of a military base). Isn’t it time for you to put the proper protection in place for the long term health of your organization?
WHAT MAKES ME DIFFERENT
It is rare to find someone with a background that includes in-depth information security knowledge and hands-on experience who has a business degree, and is a Certified Coach. This mix of education and experience equips me to best serve you in creating a long term sustainable security culture.
NEXT STEPS
Email me at sharon@c-suiteresults.com or message me via LinkedIn https://www.linkedin.com/in/smithsharonj/|You are a successful CEO, passionate about the continued growth and health of your organization.
Because you are responsible for the strategy and success of your organization you are losing sleep over the continual reports of security breaches, stolen data, and ransomware. It appears that no one is safe anymore.
But all the terminology and acronyms (i.e., cloud, IoT, BOD, APT, IAM, IDS, Pen Test, malware, ransomware, identity access management, patch management, change management...not to mention all the compliance regulations) is overwhelming. And that makes sense because security is not in your wheelhouse, but it’s in mine! And I can help you!
WHAT I DO
As a 12-year veteran of the information security, audit, and compliance industry, I understand the technology your organization works with and the challenges you face.
I translate cyber security into business terms for executives who want to implement security but don’t know how. I help create the proper internal messaging, education, and shape the organizational culture needed for sustainable success in security.
Too many people believe that security is an IT problem and and that simply throwing budget at the IT department equals security. Instead, I help you paint a full picture of your security posture, the risks associated with it, and the most effective strategy to help close the gaps.
Security is not insurance - it is force protection (think of the armed guards in front of a military base). Isn’t it time for you to put the proper protection in place for the long term health of your organization?
WHAT MAKES ME DIFFERENT
It is rare to find someone with a background that includes in-depth information security knowledge and hands-on experience who has a business degree, and is a Certified Coach. This mix of education and experience equips me to best serve you in creating a long term sustainable security culture.
NEXT STEPS
Email me at sharon@c-suiteresults.com or message me via LinkedIn https://www.linkedin.com/in/smithsharonj/|You are a successful CEO, passionate about the continued growth and health of your organization.
Because you are responsible for the strategy and success of your organization you are losing sleep over the continual reports of security breaches, stolen data, and ransomware. It appears that no one is safe anymore.
But all the terminology and acronyms (i.e., cloud, IoT, BOD, APT, IAM, IDS, Pen Test, malware, ransomware, identity access management, patch management, change management...not to mention all the compliance regulations) is overwhelming. And that makes sense because security is not in your wheelhouse, but it’s in mine! And I can help you!
WHAT I DO
As a 12-year veteran of the information security, audit, and compliance industry, I understand the technology your organization works with and the challenges you face.
I translate cyber security into business terms for executives who want to implement security but don’t know how. I help create the proper internal messaging, education, and shape the organizational culture needed for sustainable success in security.
Too many people believe that security is an IT problem and and that simply throwing budget at the IT department equals security. Instead, I help you paint a full picture of your security posture, the risks associated with it, and the most effective strategy to help close the gaps.
Security is not insurance - it is force protection (think of the armed guards in front of a military base). Isn’t it time for you to put the proper protection in place for the long term health of your organization?
WHAT MAKES ME DIFFERENT
It is rare to find someone with a background that includes in-depth information security knowledge and hands-on experience who has a business degree, and is a Certified Coach. This mix of education and experience equips me to best serve you in creating a long term sustainable security culture.
NEXT STEPS
Email me at sharon@c-suiteresults.com or message me via LinkedIn https://www.linkedin.com/in/smithsharonj/
- Using the Golden Rule to be a Better Leader - July 2, 2018
- Arming the Cyber Defender – Your Employees - May 8, 2018
- The Secret to Hiring Cybersecurity Professionals - May 3, 2018