Ambidextrous Cybersecurity: Organizing the Security Function for Discovery and Execution

Most breaches stem either from attackers exploiting an unexpected path or from gaps in basic security hygiene. This puts CISOs under constant pressure to balance the Discovery of novel attack paths with careful Execution of the fundamentals – a classic ambidexterity challenge. This article, using insights from research on organizational learning and strategic renewal, explores how CISOs can utilize different organizational design elements to manage this balance.
Recent technical advancements and geopolitical shifts have significantly increased the level of sophistication of the global cybersecurity landscape. On the one hand, we have become better at defending and testing our defenses . . .