Strategy, Tactics, and Logistics as a Model for Security Program Success
Summary: A Dragos blog post argues that the military concepts of strategy, tactics, and logistics translate well to cybersecurity programs, and that deficiencies in any one area produce recognizable, recurring failures. It describes strategy as the executive-level work of measuring risk and setting direction, tactics as field-level decisions delegated to technical experts, and logistics as the people, tools, and licensing that must arrive on time.
Bottom line: The post names concrete consequences of getting one layer wrong: security implementations cancelled after hundreds of hours of work, a password left unconfigured because no playbook step required it, forensics lost at a shift change, and expired tool subscriptions or delayed updates stalling incident response. It also notes that conflicting programs between two teams are typically a strategic failure, not a technical one.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026