Way back in 2009, NIST released a 20 page document that is a great set of fundamental
recommendations for small business cyber/information security.
There's plenty of ways to spend money on shiny cyber security software and devices, but this is a great foundation to build your company's defenses on before start buying Intrusion Detection Systems or hiring Penetration Testers or Social Engineers.
BLUF/Summary Create a culture where goals are challenging enough that meeting 70–90% is considered a massive win. If your team is hitting 100% of their targets every quarter, you aren't setting goals; you’re just documenting current capacity. The Tension of Ambition Finding the right tension
The Trap: Communication Friction In small or rapidly scaling organizations, "tribal knowledge" often includes unwritten, and often destructive, communication habits. When pressure rises, leaders often default to "You" statements—"You missed the deadline" or "Why are you being defensive?" These are verbal
The Efficiency Trap In a recent piece, Scott Young revisited Stephen Covey’s classic concept of the Compass vs. the Clock. In our current "speed-at-all-costs" AI environment, this distinction has never been more vital. Most leaders are obsessed with the Clock: How fast can we ship? How many
The Chaos of Tribal Knowledge and Ambiguous Authority Small organizations often run off of "tribal knowledge." Everyone just knows how things are done because they sit in the same room (or Slack channel) and figure it out on the fly. There's a classic approach of "