Most API security strategies are underdeveloped. Let’s unpack that.

For attackers, Sun Tzu’s “The Art of War” has guidance on war strategy. For starters, “All warfare is based on deception. Hence, when able to attack, we must seem unable; when using our forces, we must seem inactive; when we are near, we must make the enemy believe we are far away; when far away, we must make him believe we are near.”


Another is: “In war, the way is to avoid what is strong and to strike at what is weak.” What if one is not an attacker, but is on the gentler side of things? Merriam-Webster’s dictionary says a strategy is “a careful plan or method.” The Cambridge dictionary says it’s “a detailed plan for achieving success in situations such as…business, industry…or the skill of planning for such situations.” Harvard Business Review says that strategy is not the same as operational effectiveness but is “about being different. It means deliberately choosing a different set of activities to deliver a unique mix of value.”


The value of strategy


Having a strategy is essential for several reasons, regardless of the area to which it is applied. Here are several key reasons for having any kind of strategy:


Direction, Purpose, and Alignment: A strategy defines one’s long-term goals and objectives, helping stay focused on what you want to achieve. A well-defined strategy also ensures that all members of an organisation or team are on the same page. It aligns everyone’s efforts towards common objectives to improve overall efficiency and productivity.
Resource Allocation: Strategy helps in effectively allocating resources. It ensures that resources are used effici ..

Support the originator by clicking the read the rest link below.