Whether we are implementing a security program, an IT strategy, or a general business strategy, certain core principles apply. Earlier today, a colleague reminded me of very wise advice that has near universal applications:

“A strategy is worth nothing if it cannot be implemented. A vision is useless if there’s no strategy behind it.”  Now go and write that 100 times to burn it into our brains.