Are technologists a threat to doing business securely?

This article argues that organizations overemphasize technology while undervaluing human risk management (HRM), outlining tensions among technologists, security leaders, and executives, and highlighting consultant bias toward high-margin tech solutions. It advocates balancing cultural and behavioral change with technical controls, leveraging frameworks like NIST CSF and ISO 27001 and HRM platforms to integrate training, measurement, and engagement, ultimately building a stronger security culture alongside technological investments.