Slow and Steady Security: Lessons from the Tortoise and the Hare

By focusing on fundamentals, enterprises can avoid the distraction of hype and build security programs that are consistent, resilient, and effective over the long run.

Aesop’s fable “The Tortoise and the Hare” can teach us a lot about security, especially nowadays. The moral of this particular story is: “slow but steady wins the race”.  Or, to look at it another way, consider how dictionary.com defines “slow but steady wins the race”: “Consistent, effective effort leads to success.”

I very much agree with this. Further, I think that internalizing this message can help both enterprise security teams and security vendors mature and behave in a more grounded, strategic, and effective manner. What do I mean by this? Allow me to elaborate.

In security, it seems that we are constantly confronted by the next shiny object, item du jour, and/or overhyped topic. Along with this seems to come an ...