Successful strategists in the security arena face the same kind of tactical issues as football coaches. Attackers are skillful, resourceful and motivated success. Football coaches can’t deploy a “one-size-fits-all” strategy, and neither can security leaders. On a macro level, this is called “Risk-Based Security.”