In the world of cybersecurity, where threats are ever-evolving and the stakes are high, a critical debate has emerged: is it the lack of visibility or the execution of security measures that poses the greatest challenge? According to Alan de Waal-Smit, head of sales at ITR Technology, the answer is clear: execution is the biggest security gap. In my opinion, this perspective is both insightful and thought-provoking, as it challenges the conventional wisdom that visibility is the primary concern. What makes this particularly fascinating is the emphasis on the human element and the interconnected pressures faced by CISOs. From my perspective, the tension between IT operations and security teams is a key factor in this debate. The 'silo problem' described by de Waal-Smit highlights the conflict between two teams with seemingly opposing priorities. While IT operations focuses on uptime and stability, security operations prioritizes speed and patching. This divide can lead to a lack of alignment and, ultimately, a failure to execute on security measures effectively. One thing that immediately stands out is the importance of integration. De Waal-Smit suggests that the solution lies in shifting from two systems of record to one system of action, integrating technology, people, and processes. This integration is crucial for faster response times, reduced noise, and real prioritization. What many people don't realize is that the human element is often the weakest link in cybersecurity. The Verizon Data Breach Investigations Report reveals that credential abuse is the top initial access vector, with stolen or abused credentials being the starting point for 22% of all breaches. This highlights the need for a more holistic approach that addresses not only technological vulnerabilities but also human risk. If you take a step back and think about it, the IBM Cost of Data Breach Report 2025 provides further context. The average breach cost in South Africa was R44.1 million, down 17% year on year. This statistic underscores the financial impact of security breaches and the need for effective execution to mitigate these risks. A detail that I find especially interesting is the role of third-party involvement. The Verizon report notes that 30% of breaches involved a third party, up from 15% the previous year. This trend emphasizes the importance of not only securing internal systems but also managing risks associated with external partners and vendors. What this really suggests is that the focus on execution goes beyond technical solutions. It involves fostering a culture of security awareness, ensuring that all stakeholders are aligned and prepared to respond to potential threats. In conclusion, the debate between visibility and execution in cybersecurity is not a binary choice. It is a complex interplay of factors, including human risk, technological vulnerabilities, and organizational alignment. As de Waal-Smit argues, the biggest gap is often in the execution of security measures. By integrating technology, people, and processes, and by fostering a culture of security awareness, organizations can bridge this gap and enhance their cyber resilience. Personally, I think that this perspective offers a fresh and valuable insight into the challenges faced by CISOs. It encourages a more holistic approach to cybersecurity, one that recognizes the interconnected nature of threats and the importance of effective execution. This raises a deeper question: how can we best align IT operations and security teams to ensure a robust and responsive security posture?
