Two things to take away from the Bejtlich post, “Stop Killing Innovation,” plus one thing I’d add.
First, stop separating business and IT. This separation, even when done in the mind or as an understood implication based on culture and decisions and attitude, really has fundamental impact on the fabric of IT, and the people in it.
Second, stop causing IT to be risk averse. This kills innovation. This should be a funamental management concept…or even psychological.
And my thing to add: this still comes back down to talented staff, just like I say about having good security. You don’t get it from just education or tools, but rather good staff doing cool things.