Andy Ellis argues that a security team's core job is protecting customers, not itself. While team safety matters, the ultimate mission is enabling the company to serve customers safely and make prudent risk decisions.
Yeah. If you are not thinking that, that impacting my customers is worse than the security team dealing with incidents, if you don't have that mindset, that's what we need to teach you, right? That's who your responsibility is. It's your customers.
As a marketer, I feel like I have to, I mean, I agreed immediately, but I don't know, maybe if I was a CISO, I would think that like protecting my team did, I don't know, was more important or that there was a different risk there.
I mean, it is important. I'm not going to say that this is like an ethical difference of, oh, always protect your customers at the expense of your team. There is a balance here, but it's a, It's a key piece of that. And the challenge is you have to understand, like, why do you exist as a team? You exist because your company serves customers. If you fail to serve customers, why are you there? Like, this doesn't mean you do crazy things to make your customers happy, but the security role is protect the customers. Make sure the company makes wise risk choices about serving the customers to keep them safe. Yep.
