Control-First Security Design Creates Friction and Limits Business Value, Finds Info-Tech Research Group

Control-First Security Design Creates Friction and Limits Business Value, Finds Info-Tech Research Group

PR Newswire

ARLINGTON, Va., July 23, 2026

Many security programs are designed around controls rather than the key services they are meant to enable. Info-Tech Research Group explains that when security controls are introduced without the context, alignment, or defined outcomes tied to how the organization operates, they create friction and fail to deliver intended value. The firm's blueprint Build Security Services for Business Value introduces a service-centric framework for designing security as a built-in enabler, not an add-on control layer.ARLINGTON, Va., July 23, 2026 /PRNewswire/ -- As organizations face rising security threats and growing dependence on digital operations, security leaders are under pressure to protect the business without slowing it down. Yet many security teams continue to implement controls in isolation from the business services they are meant to protect, according to Info-Tech Research Group. To help address this challenge, the global research and advisory firm has published its Build Security Services for Business Valueblueprint,designed to help CISOs and IT leaders define security as a service with clear context, measurable outcomes, and business value.