Information Security Strategy Skill

Purpose

Define and maintain Hack23's information security strategy that aligns security objectives with business goals, ensuring all projects contribute to the organization's overall security posture.

Rules

Strategic Alignment

MUST:

• Align security controls with business risk appetite
• Consider security implications in all architectural decisions
• Balance security investment with business value
• Maintain security as a core differentiator (transparency, open-source ISMS)

MUST NOT:

• Implement security theater (controls that look good but don't protect)
• Sacrifice usability without corresponding risk reduction