{"id":86756,"date":"2018-08-08T05:00:06","date_gmt":"2018-08-08T12:00:06","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=86756"},"modified":"2019-01-31T13:10:51","modified_gmt":"2019-01-31T21:10:51","slug":"cybersecurity-canon-review-exponential-organizations","status":"publish","type":"post","link":"https:\/\/www2.paloaltonetworks.com\/blog\/2018\/08\/cybersecurity-canon-review-exponential-organizations\/","title":{"rendered":"Cybersecurity Canon Review: \u201cExponential Organizations\u201d"},"content":{"rendered":"<p><div style=\"max-width:100%\" data-width=\"600\"><span class=\"ar-custom\" style=\"padding-bottom:43.33%;\"><img loading=\"lazy\" decoding=\"async\"  class=\"alignnone size-full wp-image-32398 lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2017\/06\/cybersecuity-canon-blog-600x260.png\" alt=\"cybersecuity-canon-blog-600x260\" width=\"600\" height=\"260\" \/><\/span><\/div><\/p>\n<p><em>We modeled the\u00a0<a href=\"https:\/\/cybercanon.paloaltonetworks.com\/\">Cybersecurity Canon<\/a>\u00a0after the Baseball or Rock &amp; Roll Hall-of-Fame, except for cybersecurity books. We have more than 25 books on the initial candidate list, but we are soliciting help from the cybersecurity community to increase the number to be much more than that.\u00a0Please write a review and nominate your favorite.\u00a0<\/em><\/p>\n<p><em>The Cybersecurity Canon is a real thing for our community. We have designed it so that you can\u00a0<a href=\"https:\/\/cybercanon.paloaltonetworks.com\/nominate-a-book\/\">directly participate in the process<\/a>. Please do so!<\/em><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: 18pt;\">Executive Summary<\/span><\/p>\n<p><em>Exponential Organizations<\/em> is not a must-read for all cybersecurity professionals. You do not need the information in this book to do your day-to-day cybersecurity job today, and I am not recommending it as a Cybersecurity Canon candidate. However, it is a must-read for business leaders as a roadmap for what we all might be facing in the next 10 to 15 years. The authors describe how some future-thinking companies are taking advantage of an information-processing-capability phenomenon whereby the number of calculations per second, per $1,000 has been doubling since the early 1900s. This phenomenon of doubling compute power has manifested exponentially in such research areas as artificial intelligence, robotics, biotech, nanotech, medicine, neuroscience, energy, and computing. All of these technologies have been doubling in price-performance every couple of years.<\/p>\n<p>This kind of rapid growth is changing the standard business problem of managing and selling scarcity, like oil, to managing and selling abundance, like energy. The implications are staggering both in terms of how the world will change and in terms of what future businesses will look like. This book is about how organizations are already taking advantage of this notion of \u201cexponential organizations\u201d and how you might evolve your current organization into this new framework.<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: 18pt;\">Introduction<\/span><\/p>\n<p>In 2014, Jeremiah Owyang, a founding partner at Kaleido Insights, noticed that a number of companies had emerged across multiple verticals that were completely disrupting the marketplace. These companies, like Airbnb and Uber, were outperforming the competition by a factor of four or more by staying small and flat but leveraging the information provided by their customer base. In other words, they were destroying their competition by operating counter to what every other business in the world was doing. Owyang coined this phenomenon the \"collaborative economy.\u201d [1] In that same year, Ismail, Malone, and Geest published this book, <em>Exponential Organizations<\/em>, which characterizes the kinds of companies that have had success with this new way of thinking. [2]<\/p>\n<p><img loading=\"lazy\" decoding=\"async\"  class=\"size-full wp-image-86798 alignleft lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon_1.png\" alt=\"canon_1\" width=\"512\" height=\"427\" srcset=\"https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon_1.png 512w, https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon_1-230x192.png 230w, https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon_1-500x417.png 500w, https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon_1-360x300.png 360w, https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon_1-48x40.png 48w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/>In <em>Exponential Organizations<\/em>, the authors describe how some future-thinking companies are taking advantage of an information-processing-capability phenomenon that has been noticed by the likes of Gordon Moore, Intel\u2019s founder, and famous futurist Ray Kurzweil. Moore predicted in 1965 that the number of components on integrated circuits would double every year. [3] Kurzweil went further back and noticed the same doubling pattern as far back as the early 1900s. [4] Kurzweil came up with an interesting metric to track the behavior: what is the number of calculations per second, per $1,000. In 1900, with Charles Babbage\u2019s mechanical Analytical Engine, the number of calculations was extremely small at 0.000005821. [4] But every five to ten years, that numbered doubled. By 1949, the number was 1.837, and we were off to the races. By 1977, the number was 26,870. By 1998, the last year in the study, the number was 133,300,000. [4]<\/p>\n<p>This phenomenon of doubling compute power has manifested exponentially in such research areas as artificial intelligence, robotics, biotech, nanotech, medicine, neuroscience, energy, and computing. All of these technologies have been doubling in price-performance every couple of years. What the authors of <em>Exponential Organizations <\/em>say is that this kind of rapid growth is changing the standard business problem of managing and selling scarcity, like oil, to managing and selling abundance, like energy. [5] For example, they predict that within 10 years, because of this exponential doubling in the renewable energy space alone, there will be enough solar power available to produce five times what is needed in the world today. Energy will become essentially free and entrepreneurs in those markets will have to figure out how to profit in a new environment where the value of the \u201cthing\u201d is essentially zero.<\/p>\n<p>The implications are staggering both in terms of how the world will change and in terms of what future businesses will look like. This book is about how organizations are already taking advantage of this notion \u201cexponential organizations\u201d and how you might evolve your current organization into this new framework.<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: 18pt;\">Body<\/span><\/p>\n<p>Ismail, Malone, and van Geest define the key attribute of an exponential organization as \u201ca minimum 10x improvement in output over four to five years.\u201d [2] That is a metric that is easy to detect, and the authors describe how the organizations that attain those metrics are different from the traditional business. One of the authors of <em>Exponential Organizations<\/em>, Salim Ismail, is the founding executive director of Singularity University, whose mission is to train visionary entrepreneurs to use these exponential ideas to solve some of the world\u2019s intractable problems. [6] He believes that, if you don\u2019t transform your own organization into an exponential organization in the very near future, your competition will start to sprint away from you by leaps and bounds. [2] I have said similar things about the DevOps movement, and I believe that most exponential organizations in the future will have embraced DevOps as the key development strategy to attain their goals. [7]<\/p>\n<p>As the authors point out, most traditional organizations fail to see the doubling effect in their own industries. They project linearly as to what the future will hold. \u201cThat is: x amount of work takes y amount of resources, 2x needs 2y, and so on of ever-greater arithmetic magnitude.\u201d [2] But, exponential organizations work by reducing staff and hierarchy and informationally enabling their company. They enlist their customer base and their communities for every aspect of the business. \u201cThey float atop the existing infrastructure rather than try to own it.\u201d [2] An x amount of work takes less than y resources but the impact on growth is 2<sup>n<\/sup> (exponential). And these are just some of the recognizable companies that have managed to pull this off:<\/p>\n<ul>\n<li>Airbnb: 90x more listings per employee<\/li>\n<li>GitHub: 109x more repositories per employee<\/li>\n<li>Valve: 30x more market cap per employee<\/li>\n<li>Tesla: 30x more market cap per employee<\/li>\n<\/ul>\n<p>Source: [2]<\/p>\n<p><img loading=\"lazy\" decoding=\"async\"  class=\"alignnone size-full wp-image-86759 alignleft lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon-2.png\" alt=\"canon 2\" width=\"362\" height=\"224\" srcset=\"https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon-2.png 362w, https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon-2-230x142.png 230w, https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2018\/08\/canon-2-65x40.png 65w\" sizes=\"auto, (max-width: 362px) 100vw, 362px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>The authors note that successful exponential organizations tend to have three key components: \u00a0a Massive Transformative Purpose (MTP) statement, some key external attributes of SCALE (staff on demand, community &amp; crowd, algorithms, leveraged assets, and engagement), and some key internal attributes of IDEAS (interfaces, dashboards, experimentation, autonomy, and social).<\/p>\n<p>An MTP is kind of a vision statement, but it has more definition and is way more aspirational. It is not like a mission statement that states what an organization does. The MTP is more about what the organization desires to accomplish. It should be so well-crafted that it starts a cultural movement within the community. Here are some example MTPs of exponential organizations [8]:<\/p>\n<ul>\n<li>TED: \u201cIdeas worth spreading.\u201d<\/li>\n<li>Google: \u201cOrganize the world\u2019s information.\u201d<\/li>\n<li>X Prize Foundation: \u201cBring about radical breakthroughs for the benefit of humanity.\u201d<\/li>\n<li>Tesla: \u201cAccelerate the transition to sustainable transportation.\u201d<\/li>\n<li>Palo Alto Networks: \u201cTo protect our way of life in the digital age by preventing successful cyberattacks.<\/li>\n<li>Unit 42 \u2013 Palo Alto Networks intelligence team: \u201cStop bad guys from winning.\u201d<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: 18pt;\">Conclusion<\/span><\/p>\n<p><em>Exponential Organizations<\/em> is not a must-read for all cybersecurity professionals. You do not need the information in this book to do your day-to-day cybersecurity job today. I am not recommending it as a Cybersecurity Canon candidate. However, it is an important book for business leaders as a roadmap for what we all might be facing in the near future, say 10 to 15 years. In other words, how we flip our business away from a scarcity mindset and toward an abundance mindset might very well determine if our organizations survive. How we information-enable our organizations so that we break free of the traditional shackles of linear thinking toward exponential thinking will determine if we remain competitive in the marketplace.<\/p>\n<p>There is one thing to note: transforming into an exponential organization is radical change for most organizations. As the authors points out, change from the status quo is almost immediately attacked by the organization\u2019s immune system \u2013 an immune system that will fight any change that deviate from its current path. Organizations that have had success here build black ops teams that operate on the fringe of the organization and which report to the CEO only. This gives the black ops team some breathing room to make things happen without the constant pressure from the organization\u2019s immune system.<\/p>\n<p>That is what happened when Palo Alto Networks helped build the Cyber Threat Alliance: an alliance of security vendors dedicated to sharing adversary playbook intelligence with each other so that our common customers do not have to develop the intelligence themselves. When we began, there were many people within the Palo Alto Networks organization who thought it was nuts to give away our intelligence for free and complete insanity to share it with our greatest competitors. But the CEO gave the mission to a team on the fringe who could operate freely and gave them resources to accomplish the task. Today, the Cyber Threat Alliance is a non-profit company that consists of security vendors who share threat intelligence with each other every day as a best practice.<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: 18pt;\">Sources<\/span><\/p>\n<p>[1] \u201cThe Exponential Enterprise: Your Most Feared Competitor Now Has A Name,\u201d by Giovanni Rodriguez, Forbes, 31 October 2014, last visited 8 May 2018,<\/p>\n<p>https:\/\/www.forbes.com\/sites\/giovannirodriguez\/2014\/10\/31\/the-exponential-enterprise-your-most-feared-competitor-now-has-a-name\/#15e8bef42b4d<\/p>\n<p><a href=\"https:\/\/www.forbes.com\/sites\/giovannirodriguez\/2014\/10\/31\/the-exponential-enterprise-your-most-feared-competitor-now-has-a-name\/#15e8bef42b4d\" rel=\"nofollow,noopener\" >https:\/\/www.forbes.com\/sites\/giovannirodriguez\/2014\/10\/31\/the-exponential-enterprise-your-most-feared-competitor-now-has-a-name\/#15e8bef42b4d<\/a><\/p>\n<p>[2] <em>Exponential Organizations<\/em>, by Salim Ismail, Michael S. Malone, Yuri van Geest, 14 October 2014, Diversion Books,<\/p>\n<p><a href=\"https:\/\/www.goodreads.com\/book\/show\/22616127-exponential-organizations?from_search=true\" rel=\"nofollow,noopener\" >https:\/\/www.goodreads.com\/book\/show\/22616127-exponential-organizations?from_search=true<\/a><\/p>\n<p>[3] \u201cCramming more components onto integrated circuits,\u201d by Gordon E. Moore, Electronics, Volume 38, Number 6, 19 April 1965, last visited 4 July 2018,<\/p>\n<p><a href=\"https:\/\/drive.google.com\/file\/d\/0By83v5TWkGjvQkpBcXJKT1I1TTA\/view\" rel=\"nofollow,noopener\" >https:\/\/drive.google.com\/file\/d\/0By83v5TWkGjvQkpBcXJKT1I1TTA\/view<\/a><\/p>\n<p>[4] \u201cExponential Growth in Computing,\u201d by Ray Kurzweil, The Singularity is Near, last visited 8 May 2018,<\/p>\n<p><a href=\"http:\/\/www.singularity.com\/charts\/page70.html\" rel=\"nofollow,noopener\" >http:\/\/www.singularity.com\/charts\/page70.html<\/a><\/p>\n<p>[5] \u201cExponential Organizations,\u201d by Salim Ismail, at USI, 9 July 2015, last visited 8 May 2018,<\/p>\n<p><a href=\"https:\/\/www.youtube.com\/watch?v=FNQSM4ipZog\" rel=\"nofollow,noopener\" >https:\/\/www.youtube.com\/watch?v=FNQSM4ipZog<\/a><\/p>\n<p>[6] \u201cHi, We\u2019re Singularity University; We prepare you to seize exponential opportunities,\u201d Singularity University, last visited 10 July 2018,<\/p>\n<p><a href=\"https:\/\/su.org\/about\/\" rel=\"nofollow,noopener\" >https:\/\/su.org\/about\/<\/a><\/p>\n<p>[7] \u201cThe Cybersecurity Canon: Site Reliability Engineering: How Google Runs Production Systems,\u201d by Rick Howard, 26 September 2017, last visited 11 July 2018,<\/p>\n<p><a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2017\/09\/cybersecurity-canon-site-reliability-engineering-google-runs-production-systems\/\">https:\/\/www.paloaltonetworks.com\/blog\/2017\/09\/cybersecurity-canon-site-reliability-engineering-google-runs-production-systems\/<\/a><\/p>\n<p>[8] \u201cThe Motivating Power of a Massive Transformative Purpose,\u201d by Alison E. Berman, Singularity Hub, 8 November 2008, last visited 11 July 2018,<\/p>\n<p><a href=\"https:\/\/singularityhub.com\/2016\/11\/08\/the-motivating-power-of-a-massive-transformative-purpose\/#sm.0004irhsuffef1g10hp1eldfklb29\" rel=\"nofollow,noopener\" >https:\/\/singularityhub.com\/2016\/11\/08\/the-motivating-power-of-a-massive-transformative-purpose\/#sm.0004irhsuffef1g10hp1eldfklb29<\/a><\/p>\n<p>[8] \u201cAnalytical Engine: COMPUTER,\u201d by Paul A. Freiberger and Michael R. Swaine, Encyclopedia Britannica, last visited 11 July 2018,<\/p>\n<p><a href=\"https:\/\/www.britannica.com\/technology\/Analytical-Engine\" rel=\"nofollow,noopener\" >https:\/\/www.britannica.com\/technology\/Analytical-Engine<\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: 18pt;\">References<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>\u201cHow 20-Year-Old Kylie Jenner Built A $900 Million Fortune In Less Than 3 Years,\u201d by Natalie Robehmed, Forbes, 11 July 2018, last visited 11 July 2018,<\/p>\n<p><a href=\"https:\/\/www.forbes.com\/sites\/forbesdigitalcovers\/2018\/07\/11\/how-20-year-old-kylie-jenner-built-a-900-million-fortune-in-less-than-3-years\/\" rel=\"nofollow,noopener\" >https:\/\/www.forbes.com\/sites\/forbesdigitalcovers\/2018\/07\/11\/how-20-year-old-kylie-jenner-built-a-900-million-fortune-in-less-than-3-years\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>\u201cWhat is Moore's Law?\u201d by Lee Bell, 28 August 2016, last visited 8 May 2018,<\/p>\n<p><a href=\"http:\/\/www.wired.co.uk\/article\/wired-explains-moores-law\" rel=\"nofollow,noopener\" >http:\/\/www.wired.co.uk\/article\/wired-explains-moores-law<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>\u201cAbundance: The Future Is Better Than You Think,\u201d by Peter H. Diamandis and Steven Kotler, Free Press, 2012, Last Visited\u00a0 9 May 2018<\/p>\n<p><a href=\"https:\/\/www.goodreads.com\/book\/show\/13187824-abundance?ac=1&amp;from_search=true\" rel=\"nofollow,noopener\" >https:\/\/www.goodreads.com\/book\/show\/13187824-abundance?ac=1&amp;from_search=true<\/a><\/p>\n<p>&nbsp;<\/p>\n<p><em>Exponential Organizations<\/em> by Salim Ismail,\u201d by Sheldon Nesdale, 21 December 2015, last visited, 8 May 2018,<\/p>\n<p><a href=\"https:\/\/www.marketingfirst.co.nz\/2015\/12\/exponential-organizations-by-salim-ismail-michael-s-malone-yuri-van-geest\/\" rel=\"nofollow,noopener\" >https:\/\/www.marketingfirst.co.nz\/2015\/12\/exponential-organizations-by-salim-ismail-michael-s-malone-yuri-van-geest\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>\u201cOrganizations of the Future,\u201d by Mark Looi, Medium, 9 May 2017, last visited 8 May 2018,<\/p>\n<p><a href=\"https:\/\/medium.com\/@marklooi\/organizations-of-the-future-8f08caf9f067\" rel=\"nofollow,noopener\" >https:\/\/medium.com\/@marklooi\/organizations-of-the-future-8f08caf9f067<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>\u201cSalim Ismail \u2013 Exponential Organizations,\u201d USI Blog, 8 December 2015, last visited 8 May 2018,<\/p>\n<p><a href=\"https:\/\/blog.usievents.com\/salim-ismail-exponential-organizations\/\" rel=\"nofollow,noopener\" >https:\/\/blog.usievents.com\/salim-ismail-exponential-organizations\/<\/a><\/p>\n<p>&nbsp;<\/p>\n<p><em>The Singularity is Near: When Humans Transcend Biology<\/em>, by Ray Kurzweil, Penguin, 2006,<\/p>\n<p><a href=\"https:\/\/www.goodreads.com\/book\/show\/83518.The_Singularity_is_Near?ac=1&amp;from_search=true\" rel=\"nofollow,noopener\" >https:\/\/www.goodreads.com\/book\/show\/83518.The_Singularity_is_Near?ac=1&amp;from_search=true<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Palo Alto Networks CSO Rick Howard reviews \u201cExponential Organizations\u201d for the Cybersecurity Canon.<\/p>\n","protected":false},"author":43,"featured_media":32398,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4521,6724],"tags":[251,4270,6296,345,6293,6299],"coauthors":[791],"class_list":["post-86756","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-canon","category-points-of-view","tag-cybersecurity-canon","tag-cybersecurity-canon-review","tag-michael-s-malone","tag-rick-howard","tag-salim-ismail","tag-yuri-van-geest"],"jetpack_featured_media_url":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2017\/06\/cybersecuity-canon-blog-600x260.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/86756","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/users\/43"}],"replies":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/comments?post=86756"}],"version-history":[{"count":1,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/86756\/revisions"}],"predecessor-version":[{"id":86837,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/86756\/revisions\/86837"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media\/32398"}],"wp:attachment":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media?parent=86756"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/categories?post=86756"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/tags?post=86756"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/coauthors?post=86756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}