Patching != Vision

Patching your systems isn’t the same as having vision.

Knowing when your software needs an update is a symptom of reading the Secunia RSS feed. Sometimes upgrading software is a symptom of a vision, but even then usually not. It’s usually the result of a support issue, reactive instead of proactive.

I asked Google to define ‘vision’ and m+w zander put it well:

“An element of leadership that outlines where the organization should go and what it should become; focuses on strategic advantages, inspiration to deliver those advantages consistently, and clarity as a decision-making criterion.”

Being hacker-free is good, but not a strategic advantage since everybody else is doing it, too.