Cyber strategy spends a lot of energy defending systems.

But the real security decisions happen earlier — in engineering and procurement.

Systems Security Engineering might be the missing piece. https://medium.com/@pjhillier/the-missing-link-in-cybersecurity-strategy-systems-security-engineering-in-defence-procurement-e916c1a8cc67