Outrunning The Lion

There’s an old story –

Two people are being chased by a lion.
One says, “We’ll never outrun it.”
The other replies, “I don’t need to outrun the lion, I just need to outrun you.”

This was posed to me this week by a CISO I am working with.

Many organisations believe they need a Level 5, best‑in‑class, no expense spared security posture to be “safe”.
most don’t.

Most attackers aren’t looking for the strongest target. They’re looking for the easiest one.
That doesn’t mean doing nothing. It means doing the right things, proportionately:

Closing obvious gaps
Fixing basic issues
Being harder to hit than those around you
Hiring the right people

Security isn’t about being impenetrable. it’s about not being the softest option on the street.

Because criminals much like lions, love easy prey.

And the same principle shows up in recruitment.
Companies don’t lose good people because someone else is perfect.
They lose them because somewhere else was easier, clearer, and quicker.
Security / Recruitment – Different problems……………………same lion.