The function of information security is to allow the business to operate and grow securely. The function of information security is to allow the business to operate and grow securely. A few years ago at another company, we had a major culture shift when an industry-recognized company released a radically new piece of technology called the iPhone. Most businesses were completely BlackBerry and there was not much tolerance for anything new. In security, we can never rest on our laurels. The lion devours the slowest in the pack. Though being the leader in the pack has its own set of perils. The hackers are very much like a submarine. They are out there but we can't see them. However, they have us clearly in their sights. They are relatively small in number compared to their potential targets yet can impart considerable damage. Any strategic planning process without a feedback loop is an exercise in futility.