I got you covered

Without a security strategy it will often not be clear how the security function contributes to the overall aims of the corporation. Unsurprisingly then security can be marginalized, or at least it does not fulfill its potential to generate competitive advantage.