When Your Past Shapes Your Future

Share this post

The old mainframe can't handle MFA!
The old mainframe can't handle MFA!

The volume remote control for our family room TV stopped working last week. So my wife asked me to fix it.

I replaced the batteries.

It didn’t work.

I tried to resync via Bluetooth.

It didn’t work.

Then I thought: Why do we have separate remotes for changing the channel and adjusting the volume anyway?

So I tried to add the volume function to my TV remote. 

I couldn’t do it. 

Apparently, our TV’s soundbar is connected to the TV controller via an optical connector. The only way to add volume to the TV remote is through an HDMI cable. 

And that presented another problem … the soundbar and controller are four feet apart and around the corner from each other. And believe me, Mrs. Black was not going to live with four feet of visible cable flopping around our family room.

Which left me with just one, fairly difficult option: hide the cable by connecting the two devices through the wall they share in common.

If you think that hurdle put an end to this adventure, you don’t know me well. 

Instead, I headed to the hardware store in search of “fish tape,” so named because this is what electricians (and stubborn cybersecurity professionals) use to hook and pull wires through walls.

Back home, fish tape in hand, and after many, many attempts to feed the wires through the hard-to-reach, tiny holes in the wall, I was successful.  The two devices were now connected, allowing the Black family to use just one remote for both TV channel changing and volume. As nature intended. 

From there, I proceeded to spend the next hour showing family members, neighbors, and an Amazon delivery driver the elegance of my work. I considered FaceTime-ing my extended family, but you know, I don’t like to brag.

But why did I choose an optical connector in the first place? I don’t remember. Maybe it came with the soundbar. Maybe a buddy told me the sound would be better.

Whatever the reason, a decision I made in the past had constrained my options more than three years later.

Early Choices Matter

“Path Dependence” is a phenomenon in which past events, decisions, or circumstances constrain or shape future outcomes and choices – even if those initial conditions are no longer relevant or optimal.

Businesses – especially those that are small and fast-growing – experience this kind of thing regularly:

  • Your 100-person company uses MacBooks because when you and your cofounder started the company, you both had a MacBook. Each time you added an employee, you bought one for them. The industry you are in may now favor Microsoft, but it’s unlikely you’ll ever switch.
  • You chose hourly billing because it was simple at the start. Over time, clients have learned to focus on hours instead of outcomes, making it hard to move to more profitable, value-based pricing.
  • You picked a location for your business in a particular office park because the rent was cheap. You’ve outgrown the location, but if you move a significant distance, you will drastically affect the commute of your employees who come from many different directions.

When is it Time to Switch?

Of course, as with my remote control dilemma, the time may come where it’s worth the cost and/or headache involved in moving to what is now a more appropriate solution.

But there’s no universal answer as to when you have reached that point; it depends on the specifics.

For example, one of our clients installed infrequently used software as their Mobile Device Management (MDM) solution. Changing to a new solution would require deploying it to every laptop and endpoint in the organization.

Does it make sense to switch? Maybe. How is the existing MDM performing? Can they do all the things a modern MDM can do? What is the cost of making the switch?

Another client uses a particular compliance software because a company they acquired was already using it – even though they would never have purchased it given their current circumstances. 

It kinda, sorta works for them and it would be a lot of work to switch. But every day, they pay the cost of limping along with what they are using.

Some Guidelines

If you find yourself faced with these kinds of choices – current options constrained by past decisions – here are some things to consider when thinking things through:

  • What is the benefit of the current solution? Does it solve the core problems it is intended to solve?
  • What are the risks of switching? What are the risks of not switching?
  • If you had a clean slate, would you purchase your current solution? If not, what solution would you use?
  • What is the monetary cost difference between the two solutions?
  • What are the switching costs for migrating from one to the other?
  • If you do nothing, is the current solution likely to get worse, better, stay the same?
  • What other projects will go undone if you invest the time and resources to make this change?

Taking these considerations into account will allow for you to make more optimal decisions regarding what to change and, as important, when.

Keep in mind as well that as you continue to grow and expand, today’s decisions become tomorrow’s constraints.

Oh no! My kids are now asking me why we have so many remotes for the basement TV. Time to find that fish tape!


Want to get great cybersecurity content delivered to your inbox? Click here to sign up for our monthly newsletter, Tales from the Click.

Rob Black
Rob founded Fractional CISO in 2017 and has helped dozens of mid-size SaaS and technology companies improve their security posture as a vCISO. He consults, speaks, and writes on IoT and security. Rob has held product security and corporate security leadership positions at PTC ThingWorx, Axeda and RSA Security. He received his MBA from the Kellogg School of Management and holds two Bachelor of Science degrees from Washington University in St. Louis in Computer Science and System Science and Engineering. He is also a Certified Information Systems Security Professional (CISSP).

Tales From The Click

Sign up for our monthly newsletter for business leaders on minimizing cybersecurity risk.

Suceed at SOC 2

Free eBook:
5 Things to Know for your First SOC 2

  • How to scope your SOC 2
  • Estimate the cost and length of your SOC 2
  • Prepare for your SOC 2
  • Manage the SOC 2 audit period
  • Leverage your SOC 2 for growth

Related Posts

Is your Cyber Insurance really going to cover you?

Only 1/3 of cyber insurance policies actually pay out in incidents. Most companies have cyber insurance policies that insure too little, or too much, and have absurdly low caps and silly exclusions.

To learn more about cyber insurance and determine if you have the right coverage for you, join us for a free vCISO Office Hours session on Tuesday, April 18 at 1 p.m. eastern time. Bring your questions!

New Release: Free SOC 2 eBook!

Getting ready for your first SOC 2? This eBook is full of actionable advice to help you prepare for and succeed in your first SOC 2 audit.

Learn:

  • How to scope your SOC 2 project
  • How to estimate the cost and length of your SOC 2 project
  • How to prepare for your SOC 2
  • How to succeed in your SOC 2 audit period
  • How to leverage your SOC 2 report to enable your business and sales
Is your Cyber Insurance really going to cover you?

Only 1/3 of cyber insurance policies actually pay out in incidents. Most companies have cyber insurance policies that insure too little, or too much, and have absurdly low caps and silly exclusions.

To learn more about cyber insurance and determine if you have the right coverage for you, join us for a free vCISO Office Hours session on Tuesday, April 18 at 1 p.m. eastern time. Bring your questions!

New Release: Free SOC 2 eBook!

Getting ready for your first SOC 2? This eBook is full of actionable advice to help you prepare for and succeed in your first SOC 2 audit.

Learn:

  • How to scope your SOC 2 project
  • How to estimate the cost and length of your SOC 2 project
  • How to prepare for your SOC 2
  • How to succeed in your SOC 2 audit period
  • How to leverage your SOC 2 report to enable your business and sales