The Cyber Security Program’s Back 40

Online slang dictionaries define the “Back 40” as “wild or rough terrain adjacent to a developed area.”

Every cyber security program has a Back 40. That metaphorical 40 acres where you just haven’t done much work. 

A cyber security’s program’s back 40 might be well marked and fenced. 

Understood. Purposeful. Intentional. 

Perhaps it’s unmarked and wild. 

Unsurveyed and without chart data.

Undefined to both your program and executive team. 

Or somewhere in between. 

But the Back 40 is there. Waiting. 

Waiting to be defined.  Waiting to be resourced.  

Waiting to be productive. Waiting to be threat modeled.

Even if we pretend that it’s not.  

Follow me on Twitter for discussion and the latest blog updates: @Opinionatedsec1. Or, start your own discussion using #crazygoodcyberteams on twitter or Linkedin and I'll read it.

SEE ALSO

The Biggest Threat To Cyber Security  

The Vendor Best Practice Excuse

A Cyber Security (Almost) Love Story