As much as cybersecurity professionals might prefer otherwise, ours is a field defined by reaction — just ask the average cyber analyst or threat hunter about their day to get a sense of how true this is.
We are a technology-centric field in a functional sense, but technology evolves interactively alongside trends in economics, sociopolitical conditions, and geopolitical fluctuations. Unfortunately, this means that cybersecurity planning gets hit coming and going. Our need to forecast is arguably greater than that of other security professions because this interplay of systemic effects makes risk harder to value. (CSO)