David Spark

That means you did not put your person in a position either they didn't know that they could have that flexibility and they should.

It should be that nobody gets a better deal by escalating.

If they escalate, it gets worse because you're saying, wow, I had to get involved and

That's not the right thing.

My people should give you the best possible deal for the business.

And it's when you escalate that you're making the deals not work so well.

So that's what the way I like to think about it is they should always be able to put themselves, they being your staff, put themselves in your shoes.

What would my boss do so that I can do that?

I'm a big fan of the pre-escalation.

Teach your people to escalate to you when they're about to say something that they know will escalate to you anyway.

They should just reach out to you and say, here's what I'm planning on doing.

Here's what I want.

And you can then easily redirect them before it becomes a problem rather than afterwards.

So I think cybersecurity has always been an afterthought.

So I want us to be cautious that this isn't a new dynamic.

What's just changed is the pace.

It used to be that by the time a developer could get an application into production, they had to go fight with IT to get a server.

And those of us who remember the hassle of dealing with networking, by then security had figured out what was going on and could come in and provide hopefully some help.

And the challenge that we're running into right now is somebody has a clever idea for an app and it is live and in production by the end of the day.

So there is no lag for a human to show up and say, oh, you should do these things.