John Wayne, Confucius, Mother Teresa or Machiavelli

Alternate Title:  Where to begin?  With yourself!!

So we've opened the can of worms and we're looking at a new job, year, project, product roadmap, audit, whatever...   What do we do now?   How are we going to find the balance point quickly, efficiently and completely (enough)?

Let's talk first about what we're facing.

Before you took on this project, you may already have known that most everyone will look at you like you are a drag on their time and only a cost to doing business . If you didn't know that, learn it, love it and live it as you won't get away from that truth.  Some will even consider you a serious threat to their success depending on their experience with you or types like you (and the number of skeletons they have to hide).

We also know that everyone (including ourself) is going to try to negotiate for the least change possible. Since most of our job is finding new or better ways to manage risk, you may as well assume they believe that the less time they have spend with you, the less change there will probably be.  So you need to be ready to deal with strong resistance.  

Also, everyone at the table (including you) has to protect their budget, mistakes and problems with all their strength. This project is an important part of their career so their lives and the lives of their children are at stake!  

Finding a path through this maze of negativity, passion, fear and dreams to the end goal where everyone is fixing what absolutely must be fixed is going to be a significant challenge!!!

IMHO, to be successful in managing complex risk management eforts, the first thing you have to figure out before any project even starts is who you are. With all the rocky terrain ahead, you know you'll be tested to your limits. So it will be very helpful to know what those limits are.

In my past, I've had employers provide various levels of personality recognition (Myers Briggs, Keirsey, DISC, etc) and  mmk, m,7negotiation training as part of consulting or management training.  These kinds of skills can help you recognize the personality traits you and others have so you can better appreciate the personal needs and goals of all the individuals in any situation.

Of the Security and Compliance types I've met, I've seen the following approaches  most often.   My suggestion would be to take a few of the tests to see where you fit.  Also, don't just think  that because you want to be one of these,  that you are.  It may turn out that you have bits and pieces of several of these or may find yourself acting like one simply because the circumstances you're in have changed you.  Don't worry. None of these is right for every circumstance. The point here is just to help you recognize these when you see them in yourself or others.

• John Wayne - You walk in and show them  your badge and say "Here's the way its going to be and you can like it or hate it, but it has to get done or I'm gonna shoot you pardner."  
• Confucius - You quote the ethics of the elders and stand your ground even if the "right" doesn't fit, history is against you and there is a cool guy on the other side of the table called Lao Tzu saying things like "Dude...just go with it and be natural because what you want us to do isn't the right way to be."  
• Mother Teresa - Give help, kindness and compassion so everyone will understand their choices were wrong so they heal their own wounds. 
• The Prince - Come in as the "expert" or "experienced" decision maker and make the calls on the fly with little room to allow respect for the team's opinion or their dreams.  

In my experience, the people I've seen be the most successful in the Security, Audit and Risk biz know when they are wearing one of these hats and can change hats if the situation calls for a different approach. The most important skill they have though is to know when to take them off AND JUST LISTEN.

So take some time and get to know yourself. It will give you the sturdy boat you need to cross the rocky waters of any project.