When we speak about military operations, we often break them down into strategy, tactics, and logistics. Almost every infosec project or program can be broken down into similar elements. If you are missing one, it’s probably going to suffer or fail down the line. (1/*)
The tactical portion is the one most of us techies think about when we’re doing blue team or red team ops. It’s running tools, remediation, triage, report writing. Without tactics, you have leaders telling teams to “hunt” or “protect the network” with no scope or technical plan.
The strategic part is equally important. That’s the project managers and leaders who measure and evaluate risk, build budgets, and figure out operational direction. Without it, there’s confusion and disorganization in the working teams. Efforts may stall or conflict.
We often forget the equally important element of logistics. Logistics includes IT and acquisition staff and processes which ensure teams have needed, licensed, and updated tools, and equipment gets to the right places on time. Without it, support contacts fail or gear is missing.
Whenever you start a new project or program, think about each of those elements, who is responsible for each, and how they are being coordinated together to work seamlessly. If you cut resources from one or keep them out of the loop, your project will ultimately suffer.
