About this Presentation
Kent Kettell reframes cybersecurity as an operational flow problem rather than only a barrier, compliance, or post-incident investigation function. Modern organizations depend on trusted signals moving across planning, inventory, sensors, access control, quality, logistics, scheduling, finance, operations, and other connected functions. A cyber event can change reality while the organization's screens and decisions still appear normal, creating a dangerous lag between what is actually happening and what leaders believe is happening. Kettell calls that lag Time-to-Truth: the time from a threat-driven change in reality until the organization has trusted information it can use to decide and act. He represents it as the sum of activities and delays across seeing the threat, understanding context, trusting the facts, deciding on a response, acting to defend, and restoring trusted flow. The shorter the Time-to-Truth, the faster the organization can recover useful information flow. The session argues that traditional barriers such as firewalls, passwords, access rules, patching, training, and compliance remain necessary but are not sufficient. Real-time protection also requires the ability to see change quickly, understand context, detect what does not belong, reduce noise, act while the event is occurring, and keep information flowing. A Signal Fabric concept combines operational inputs into protected information and instant insights that can support better decisions while highlighting flow constraints such as capacity, waiting, rework, cost blocks, and excessive handoffs. When trusted information flow is lost, the restoration process can itself become the constraint. Networks may be isolated, analysts may need to reconstruct events from logs, decisions slow, and response is delayed precisely when the organization most needs reliable signals. Kettell closes with five questions practitioners can use: What is the goal? What information is needed? Where do the signals come from? How long does it take to reach trusted understanding? What happens to the goal if that information is late, wrong, stolen, or unavailable? The practical recommendation is to measure Time-to-Truth and use it to strengthen resilience, continuity of operations, mission assurance, and cash flow.
What Will You Learn
To help you get the most value from this session, we’ve highlighted a few key points. These takeaways capture the main ideas and practical insights from the presentation, making it easier for you to review, reflect, and apply what you’ve learned.
Why cybersecurity can be viewed through a TOC flow lens: organizations depend on trusted information signals, and a cyber incident can change reality before decision-makers know that the system has changed.
How Time-to-Truth measures the delay from a threat-driven change in reality to the point when trusted information is available for decision and action, making restoration speed an operational performance issue.
Why barrier controls alone are insufficient and how real-time visibility, context, anomaly detection, noise reduction, rapid action, and continuity of trusted information can protect the flow while work is occurring.
How five practical questions - goal, required information, signal sources, Time-to-Truth, and consequences of information failure - can reveal where loss of trusted information could become the constraint on resilience, mission, continuity, or cash flow.
Instructor(s)
Kent Kettell
Kent W. Kettell is a senior executive leader with over four decades of experience improving complex operational systems across the U.S. Navy, defense industry, and federal government. A former nuclear-trained submarine officer and Engineering Duty Officer, he led NAVSEA’s first Critical Chain implementation, achieving 19 consecutive on-time submarine maintenance availabilities. He has since guided major operational transformations in shipyards, manufacturing, enterprise IT, and national cybersecurity environments. Kent currently works on rapid-deployment cyber defense capabilities designed to provide real-time visibility and operational protection of mission-critical networks. He is a long-time practitioner of the Theory of Constraints and has applied its principles to large-scale operational, project, and enterprise transformation efforts.