Your Company Changed. The Market May Not Care.

CEOs usually understand that corporate positioning has to follow strategy. The harder problem is that the market does not necessarily follow along.

A company can acquire new capabilities, enter new categories, hire new talent, change its revenue mix and still be understood primarily through the business that made it famous. In my experience, CEOs often overestimate how quickly corporate identity catches up with corporate strategy.

I saw three versions of that problem at Websense, Guidance Software and Trustwave.

At Websense, the company was strongly identified with web filtering. That was a valuable franchise, but by 2006 it had become too narrow a description of what management wanted to build. The company moved into data protection with the $90 million acquisition of PortAuthority, then broadened again through the roughly $400 million acquisition of SurfControl, adding email security, hosted services and a larger global customer base. The business changed materially.

What mattered, though, was not simply that Websense had more products. The company had to convince the market that those acquisitions represented a coherent move from controlling internet access toward protecting users and information more broadly. That is a much harder task than announcing a transaction. Portfolio expansion creates possibility. It does not automatically create a new identity.

Guidance Software demonstrated the problem even more clearly. Guidance had one of the strongest identities a technology company can have: EnCase was almost synonymous with computer forensics. That gave the company extraordinary credibility, but it also made expansion difficult.

Guidance extended EnCase into enterprise investigations, eDiscovery and cybersecurity. From a technology standpoint, the adjacencies made sense. The same endpoint visibility that supported forensic investigation could be useful in incident response. The same collection capabilities could support legal discovery.

But technical logic is not the same as market permission.

Customers may accept that a company is capable of doing something without mentally placing it in that category. Guidance could add eDiscovery functionality and cybersecurity use cases while still being thought of first as the EnCase forensics company. The stronger the original identity, the more difficult it can be to escape.

That is one of the paradoxes of category leadership. Success creates credibility, but it also creates cognitive inertia.

Trustwave faced a similar problem with PCI compliance. When I joined in 2011, compliance had given the company extraordinary reach and a large customer base. But management wanted Trustwave to be seen as a global cybersecurity and managed security company.

The company spent years creating evidence for that claim. It acquired M86 Security, expanded managed security services, built out security operations, added database-security capabilities and continued investing in SpiderLabs. SpiderLabs mattered because it supplied visible proof of expertise through breach investigations, threat research, vulnerability discovery and penetration testing.

Over time, the balance shifted. By 2015, when Singtel agreed to acquire 98 percent of Trustwave at an enterprise valuation of about $850 million, the strategic rationale was not “we are buying a PCI compliance company.” Singtel was buying managed security, cybersecurity expertise, global reach, security operations and SpiderLabs.

Trustwave had changed what the company meant in the market.

The difference among these examples is useful because they show that identity transformation is not binary. Sometimes the market moves with the company. Sometimes it moves partially. Sometimes a dominant legacy association remains stubbornly intact even when the underlying business has changed substantially.

The mistake is assuming that business transformation and identity transformation happen at the same speed.

They do not.

A CEO can change the operating reality relatively quickly through acquisitions, product investment or organizational changes. Market perception is slower. Customers have established buying patterns. Analysts have categories. Reporters have shorthand. Competitors reinforce old associations. Even employees may continue describing the company using language that stopped being strategically useful years earlier.

This creates a particular leadership problem: when does the company have enough evidence to lead with a new identity?

Too early, and the repositioning sounds aspirational. The market sees a company trying to claim a category it has not yet earned.

Too late, and the old identity becomes a constraint. The company may be excluded from opportunities simply because customers do not think to include it.

The answer is not more messaging. It is better judgment about proof.

A new identity becomes credible when multiple signals point in the same direction: acquisitions, products, customers, revenue mix, analyst recognition, talent, partnerships and the way management allocates capital. Communications can connect those signals and make the strategic direction legible. But it cannot manufacture permission that the business has not yet earned.

That is why I think CEOs should spend less time asking, “What do we want to be known for?” and more time asking, “What would make a skeptical customer believe us?”

The second question is much harder.

It also produces better strategy.

The market does not care that a company has changed because management says it has. It cares when the evidence becomes impossible to ignore.