WEEK 38 · FORWARD MOVES

Write one team's charter with no tool and no skill in the sentence.

Your org chart is built out of skills, and the work stopped arriving in a shape those skills can own.

Your org chart is a list of skills, and the work stopped arriving in a shape a skill can own.

Seventy-eight percent of the boxes on mine name a skill rather than an outcome. Detection engineering, identity, GRC, cloud security, application security, each box holding people who know one narrow thing extremely well. That structure earned its place honestly, because the work arrived as tasks, and a task belongs to whoever knows that task best.

That logic is coming apart.

As we move from tasks to orchestration, and from deep task knowledge to making sure agents do their job right, the skill that justified the box stops being the scarce thing in the room. What the team owes the business is the only question left worth building an org around.

Watch the boundaries, because that is where this shows up before it shows up anywhere else. Security and infrastructure have run this one for as long as I have been doing the job. One team carries the obligation to protect something and holds no access to it. The other team holds all the access and was never built to protect anything, and the work falls straight through the space between them.

The seam is velocity. Agents cross and blur those boundaries now. People do not, and the mismatch is painful in a way no org chart knows how to express.

Product organizations settled this a long time ago and security never borrowed it. They build durable, persistent teams around something that persists. The team owns an outcome for years while the skills inside it turn over constantly, because the skills were never the thing being organized.

People hear "across many domains" and picture generalists, thin everywhere and deep nowhere. The teams doing this well read differently. One person carries an outcome through identity, through data, through whatever the next quarter drags in, with enough depth in at least one of them to catch an agent handling a piece of it badly. Depth still matters enormously. It just has to sit under an outcome instead of inside a box.

Most security charters cannot answer the question that actually matters, which is what benefit and outcome the team delivers for business value. They list what the team is good at instead. Read three of them side by side and you will learn which products those teams operate and close to nothing about what any of them owe the company.

Here is the part that costs real money. Recruiting runs downstream of the chart, so every requisition open right now describes a skill slot, because the chart it feeds describes skill slots, which means every month of hiring goes deeper into boxes that are already dissolving. I am holding one right now for that reason, until the model settles enough for me to re-assess what skill the role actually needs.

So, here's the MondayMove

Take one team on your org chart and write its charter as a single sentence naming the outcome it owes the business, with no tool name and no skill name allowed anywhere in the sentence. If nothing survives that constraint, you found the team to redesign first.

This is about aligning the security function as a durable product and covering the seams AI is exposing even before you recognize it.

Friday Follow-Up

Nobody could finish the sentence.

I ran this one before I asked anybody else to, and the hardest charter was not the one I expected.

MondayMove gives you one concrete action every Monday. FridayFollowUp closes the loop.

Each Friday, a short dispatch on what practitioners actually found when they ran the week's move: where they got stuck, what surprised them, and what to do next. Not sanitized case studies. Field notes. Practitioner to practitioner.

This one looked small on Monday and it is not small.

Monday asked for one sentence. One team, what it owes the business, and not a single tool or skill word allowed inside it.

Start with mine, because I ran this before I put it in front of anybody else. Nothing got reorganized. Every box still sits where it sat, drawn around a skill, and everything that moved moved inside the charters.

Design and build took the most attempts by a distance, because the friction does not originate there. Operations induces it. You end up writing a charter for one function whose outcome gets decided by how a different function behaves, which is this whole argument stated small.

The pushback came from me, and it was about pace rather than direction. This is profoundly different from years of operation. A change that size does not get to be sudden, and it needs solid change management underneath it or people read it as one more reorg with better vocabulary.

Go looking inside the seams and you find gaps, and work arriving later than it should have. Mostly you find humans. That is why the charters went back through the common security frameworks at the end. Those frameworks lay out security's battlefield better than anything I would draw freehand, and a charter can read beautifully while leaving part of that battlefield uncovered. Where I expect this to break for you is earlier than where it broke for me.

The zero-word result creates a problem the move never warns anybody about, and I should have said it Monday. Run it with the team in the room and somebody hears an empty charter as proof their job is unnecessary. Knowing that is not what it means will not help them in the moment. Run it alone first, then bring them the second version, the one naming what they should own.

Take whichever sentence survived and show it to one person outside security who depends on that outcome. You are not asking approval. You are checking whether they recognize what you described as something their side actually needs, and the failure mode is specific. They will be polite, they will nod, and they will not be able to say what it means.

If that happens, it is still written in our language. Rewrite it in theirs and two functions have agreed on what one owes the other. That agreement is the durable object. The team is only how you staff it.

This is about changing security before it is changed.

Keep going. See what a week can do.

No correct answers here. This is practitioner-to-practitioner. The more honest the responses, the more useful this gets for everyone reading on Monday morning.

See you then.

Discussion