Security professionals who look to advance their careers will often present their past successes as an indicator of achievement of equivalent results with a new organization. The measurement of knowledge together with how one shows characteristics and competencies does have merit. However, it also assumes that the problems and risks faced previously will be the same in the future.

Historical knowledge and analysis are definite benefits if they are adaptable. The underlying factors that influence future security risks are far more complex. Security practitioners will need an understanding of the internal and external cognitive risks facing organizations.