Rick Howard, CSO, Palo Alto Networks: Get threat prevention right before moving on to more advanced operational capabilities. Detection and eradication are as important as prevention, but if you are not doing prevention properly, the other two are a waste of resources.
Run every security decision through the “material impact” lens. The security space is filled with lots of shiny objects. It is easy to get distracted. If actions my team are taking do not reduce the risk of material impact to the company, then we need to stop what we are doing and concentrate on something else; something that does.