This Series:
Part 1 (Intro) | Part 2 (Hire Strange Renegades) | Part 3 (Build Craftsmen) | Part 4 (Create Artisan Products) | Part 5 (Earn Raving Fans) | Part 6 (Forge an Inimitable Brand)
In the last post, we talked about how the Strategy Flywheel at risk3sixty begins with Hiring Strange Renegades — finding exceptional people who think differently, challenge convention, and care deeply about their work.
And while I believe that hiring great people is the most essential component to the flywheel, it is only the beginning. The next turn of the Flywheel is where we take that raw talent and transform it into mastery. We call this stage Building Craftsmen
At risk3sixty, we believe craftsmanship is the bridge between potential and performance. It’s the process of turning bright, driven individuals into true masters of their craft - professionals who take pride in the details, lead by example, and continually raise the bar for everyone around them.
The Philosophy of Craftsmanship at risk3sixty
There is this verse in Ecclesiastes that I think sums it up well:
"Wherefore I perceive thatthere isnothing better, than that a man should rejoice in his own works; for thatishis portion: for who shall bring him to see what shall be after him?" (Ecclesiastes 3:22)
The mindset is this: There is joy in the work itself.
Good work for the sake of good work in itself.
That's Craftsmanship. Isn't it?
Craftsmanship is one of our core values. It’s not just about technical skill - it’s about mindset. A mindset of doing good work because it feels good and because we want to. And also because we know that mindset will result in outstanding products and services.
To us, a craftsman is someone who:
- Takes ownership of their work and outcomes.
- Strives for excellence, even when no one’s watching.
- Learns continuously and helps others do the same.
- Puts in the work effort to hone their skills.
- Balances precision with creativity.
We don’t expect perfection. And now one has ever "arrived" at craftsmanship. But we do expect pride in the process and a relentless pursuit of continuously improving. Over time, this mindset compounds. Craftsmen build great products. Great products create raving fans. Raving fans build an inimitable brand.
That’s the Flywheel in motion.
How We Build Craftsmen
While it require a personal commitment to strive for craftsman, there are things we try to do as a company to facilitate development. We’ve designed a series of intentional programs and cultural practices to help every team member grow professionally, technically, and personally. Each of these initiatives plays a specific role in developing mastery and leadership.
Here are a few examples:
- Goal Setting and Individual Development Plans:
Every team member works with their manager to design individual development plans and set goals to advance their career. The plans are personalized to the individual and what they hope to accomplish. - The Journeyman Program (Leadership Development):
Our 6-month leadership development program helps team members evolve from strong individual contributors into capable leaders through structured learning, mentorship, and real-world leadership challenges. - Paid Certifications and Trainings:
We invest directly in growth by covering the cost of certifications, training programs, and conferences - because when our people grow, the firm grows. - Centers of Excellence:
These are dedicated practice groups focused on key areas like SOC 2, ISO 27001, AI, and offensive security where our craftsmen refine methodologies, build tools, and mentor others to scale excellence across the firm. We have also designed training programs to get up team members up to speed in each area. - Capstone Projects:
Our offensive security team designs capstone projects that are built into team member's individual development plan. Team members are given the opportunity to create something lasting that improves our tools, processes, or client experience while showcasing their mastery and innovation. - Lunch & Learns:
Regular team-led sessions where we share knowledge, celebrate wins, and encourage continuous learning across disciplines in a collaborative, informal setting. Many of our team members use LnLs to test out new materials for upcoming talks, educate the team on new topics, or present original research.
Together programs like these form a system to help produce good work. By combining structure, mentorship, and continuous learning, we create an environment where talented people evolve into true craftsmen. The impact shows up in the quality of our work, the confidence of our teams, and the trust our clients place in us. This is where investment in people begins to turn into momentum for the entire Flywheel.
Why Building Craftsmen Matters
I know we are being a bit aspirational here, but I hope that our way of thinking at risk3sixty produces a new way of thinking about work for our team members. One where work (of any kind) evolves from one of toil into one of joy and appreciation. Where people go about there day striving for excellence; rather than just going through the motion.
Maybe we can be a small spark that starts a fire in the heart of our people.
Beyond that, building craftsmen is about more than professional development, it’s about building the foundation for everything that follows in the Flywheel.
When we invest in mastery, we elevate the quality of our work. That quality translates into Artisan Products - the next stage in our Flywheel. And ultimately, into earning Raving Fans who trust us to deliver at the highest level.
That is the compounding power of the Flywheel.
What’s Next
In the next post, we’ll explore how the work of our craftsmen comes to life in the next stage of the Flywheel: Artisan Products.
We’ll talk about how excellence in people leads to excellence in what we create - the systems, tools, and services that set risk3sixty apart.
Read on to part 4 --> Part 4 (Create Artisan Products)
Christian Hyatt
Like our content? Subscribe and stay informed.
Related posts
Tags
- Access Control (3)
- Amazon (1)
- Artificial Intelligence (3)
- Assessment (1)
- Attack Surface (2)
- Attack Surface Management (3)
- Attestation (1)
- Audit (1)
- Awareness Week (3)
- AWS (2)
- Backup And Recovery (1)
- BCAW (4)
- BCMS (1)
- Blackbasta (1)
- Business (16)
- Business Continuity (6)
- Business Continuity Planning (2)
- Caas (1)
- Certification (1)
- Christian Hyatt (19)
- CI (1)
- CISO (8)
- CISO Discussions (24)
- Cloud (1)
- CMMC (1)
- Competitive (1)
- Compliance (17)
- Compliance As A Service (5)
- COVID (1)
- Cyber Risk (6)
- Cyber Risk Management (59)
- Cyber Security Law (2)
- Cybersecurity (26)
- Cybersecurity Controls (4)
- Disaster Recovery (5)
- Engineers (1)
- Ethical Hacking (1)
- EU AI Act (3)
- Exercises (1)
- GDPR (4)
- GRC Tool (6)
- Grit (1)
- Hacking (3)
- Hashcat (1)
- HITRUST (16)
- IaaS (1)
- Information Security (11)
- Internal Audit (2)
- ISO (3)
- ISO 22301 (1)
- ISO 27001 (18)
- ISO 27001 Compliance (19)
- ISO 27018 (1)
- ISO 27701 (2)
- ISO 42001 (6)
- ISO 42005 (1)
- IT Audit (9)
- IT Audit And Compliance (33)
- Kahoot (1)
- Leadership (6)
- Management (1)
- Network Security (4)
- News (5)
- News And Events (20)
- NIST 800 Series (2)
- NIST 800-171 (1)
- OSINT (1)
- Outsourced Pci (1)
- P2pe (1)
- Passwords (3)
- PCI DSS (13)
- Penetration Test (7)
- Penetration Testing (31)
- Pentest Report (1)
- Phishing (1)
- PIA (1)
- Press Release (3)
- Privacy (8)
- Privacy Compliance (7)
- Privacy Impact Assessment (1)
- Privacy Shield (1)
- Ransomeware (1)
- Regulatory Compliance (12)
- Report (2)
- Risk Assessment (5)
- Risk Management (19)
- SDLC (2)
- Security (22)
- Security Advisory (1)
- SOC 2 (18)
- SOC Reporting (23)
- Soc2 (1)
- Strategy (1)
- System Backdoor (1)
- Tabletop (1)
- Training (5)
- VCISO (7)
- Vendor Management (2)
- Vulnerability Management (2)
- Vulnerability Scan (1)
- Wannacry (1)
- Webinars (9)