Question
Which principles guide innovation management according to classic leadership doctrine?
Answer
Leadership principles like goal orientation, focus, and simplicity translate into innovation principles like defending competitive advantage, concentrating project forces, and balancing the innovation portfolio.
The two parallel lists (selection):
| Grundsätze der Führung | Grundsätze im Innovations-Management |
|---|---|
| Ausrichtung auf das Ziel (goal orientation) | Schaffen/verteidigen von Wettbewerbsvorsprung (create & defend competitive lead) |
| Schwergewichtsbildung (focus of effort) | Konzentration der Projekt-Kräfte (concentrate project forces) |
| Einfachheit (simplicity) | Verständliche Innovations-Lösungen (understandable solutions) |
| Sicherheit (security/safety) | Risikoausgleich im Innovations-Portfolio (risk balance in the portfolio) |
| Ökonomie der Kräfte (economy of forces) | Abstimmung von Zielen und Mitteln (align goals and means) |
| Führbarkeit, Flexibilität, Überraschung | Nachhaltige Prozesse, Minimierung der Führungs-Komplexität, externe Koalitionen, Stärken-Ausbau, geschickte Markt-Einführung |
The takeaway: innovation isn't managed by enthusiasm but by the same discipline as any leadership task — focus scarce forces, balance risk across a portfolio (not every project may be a moonshot), and keep solutions simple enough to govern.
Note saved — thanks!
Question
In analysing a real incident, why might "lateral movement" be impossible to reconstruct afterwards, and what does that reveal about an organisation's security maturity?
Answer
If logging and monitoring were inadequate, the attacker's spread between systems leaves no traceable record — a sign of low detection capability and security maturity.
Lateral movement is how an attacker, after gaining a foothold, pivots from one internal system to others. Reconstructing it requires sufficient logs, network visibility and retained telemetry. When investigators cannot reconstruct it, the usual cause is that the necessary sensors and log retention were missing — exactly the visibility gap that detection depends on. So an inability to trace lateral movement is itself evidence of a low security maturity level (Security Reifegrad): weak detection means attackers can move and dwell undetected.
Go deeper:
MITRE ATT&CK — Lateral Movement (TA0008) — the catalogue of concrete techniques attackers use to pivot between internal systems after gaining a foothold.
Note saved — thanks!