Achieving high performing security teams through agile ways of working

The Need for Agile Security

Cybersecurity teams today face a rapidly evolving threat landscape. Attackers operate with an agile mindset—adapting tactics, leveraging AI and automation, and exploiting vulnerabilities faster than traditional security defences can respond. For most organisations, cyber security budgets are rationalised, if not increasingly constrained, meaning smarter decisions need to be made about what to protect, and how. Security leaders no longer have the luxury to ‘buy everything, implement everywhere,’ even at the largest enterprises where it might once have seen possible. Meanwhile, security teams remain bound by rigid processes, excessive documentation, and isolated decision-making structures. This approach is no longer sufficient. Security must become agile.

What Is an Agile Security Team?

When we run into seemingly intractable problems, creative dead-ends, and blockers to productivity, it is time to reinvent the accepted wisdom of how things must be done. This is as true for us now as it was for the seventeen experienced software practitioners that gathered at Snowbird, Utah, in February 2001. Frustrated by the failures of traditional software development to meet increasing demands for faster and more fit-for-purpose solutions, and inspired by the Lean Movement and Just-in-Time (JIT), they were prepared to confront some 'sacred cows' and forge a new path.

The result was not a prescriptive method for building software, but rather an agreed set of principles collectively defined in the Manifesto for Agile Software Development.

Emphasising flexibility, collaboration, and responsiveness, it presents four key values:

For cybersecurity teams, this translates into four points of emphasis:.

This presentation will draw upon the presenter's real-life security team leadership experience as well as other recent and relevant research to demonstrate why more agile ways of working are not just desirable for cyber security teams, but essential in 2025.

It will also cover: