I wish all security pros practiced a scenario-first mindset. Explanations based on risk scenarios before jumping to best practices, gaps, controls, compliance etc. I wrote an essay to coach on this: "Writing a risk scenario"
medium.com/starting-up-...
medium.com
Writing a risk scenario
A risk scenario is a fictional but plausible event that could harm your organization. Writing one well improves communication with others…
