Great Article !
Developing a cybersecurity strategy means developing proactive scenarios.
As you mentioned, it's much more than reacting to vulnerabilities and attacks.
Often, however, reactions only take place when systems have been attacked.
So it is important to see cyber security as a continuous process. As already mentioned, this also includes training in the area of social engineering and not the sole focus on technical weak points.
I am glad to have found your blog and someone competent in this area.
As the axiom goes "security is only relevant, when it fails". Somehow, we must change this in our industry to become more proactive. The good fight.
Good to meet you as well. I like your content and an now following you!