--- title: "Mission vs Vision vs Purpose: How to Write Them" description: "Most company About pages use mission, vision, and purpose as synonyms. They answer three different questions. Here is the difference, and Blue Goat Cyber's…" lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "Person", "@id": "https://christianespinosa.com/#person", "name": "Christian Espinosa", "url": "https://christianespinosa.com/", "image": "https://christianespinosa.com/__l5e/assets-v1/de07e44b-a8e0-4bcc-bcb0-13aec15421f1/headshot-front.jpg", "sameAs": [ "https://www.facebook.com/christian.espinosa.official", "https://x.com/Ironracer", "https://www.instagram.com/christian.espinosa.official/", "https://www.youtube.com/@ChristianEspinosaOfficial", "https://www.linkedin.com/in/christianespinosa/" ], "jobTitle": "Bestselling Author, Keynote Speaker, Entrepreneur", "worksFor": { "@type": "Organization", "name": "Blue Goat Cyber", "url": "https://bluegoatcyber.com/" } }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://christianespinosa.com/#website", "name": "Christian Espinosa", "url": "https://christianespinosa.com/", "publisher": { "@id": "https://christianespinosa.com/#organization" }, "inLanguage": "en-US" }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://christianespinosa.com/#organization", "name": "Christian Espinosa", "url": "https://christianespinosa.com/", "logo": { "@type": "ImageObject", "url": "https://christianespinosa.com/logo.svg" }, "founder": { "@id": "https://christianespinosa.com/#person" }, "sameAs": [ "https://www.facebook.com/christian.espinosa.official", "https://x.com/Ironracer", "https://www.instagram.com/christian.espinosa.official/", "https://www.youtube.com/@ChristianEspinosaOfficial", "https://www.linkedin.com/in/christianespinosa/" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Mission vs Vision vs Purpose: How to Write Them", "description": "Most company About pages use mission, vision, and purpose as synonyms. They answer three different questions. Here is the difference, and Blue Goat Cyber's three.", "image": "https://christianespinosa.com/blog/mission-vision-purpose-hero.jpg", "datePublished": "2026-07-25T22:30:00Z", "dateModified": "2026-07-25T22:30:00Z", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://christianespinosa.com/blog/mission-vs-vision-vs-purpose" }, "author": { "@type": "Person", "name": "Christian Espinosa", "url": "https://christianespinosa.com/about" }, "publisher": { "@type": "Organization", "name": "Christian Espinosa", "logo": { "@type": "ImageObject", "url": "https://christianespinosa.com/logo.svg" } } }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What is the difference between mission and vision?", "acceptedAnswer": { "@type": "Answer", "text": "Vision is the future state you are trying to create, described as a world rather than an activity. Mission is the work you do now to move toward it, named specifically enough to include an audience and an outcome. Vision is where you are pointing; mission is what you are doing today." } }, { "@type": "Question", "name": "Do you really need all three, or is one enough?", "acceptedAnswer": { "@type": "Answer", "text": "You need purpose and mission. Purpose keeps the company honest when strategy changes, and mission decides what you take on this quarter. Vision is the bridge between them, and it earns its place only if it describes a future clearly enough to argue about." } }, { "@type": "Question", "name": "How long should each statement be?", "acceptedAnswer": { "@type": "Answer", "text": "Purpose can be two words. Mission usually runs one sentence with an audience and an outcome in it. Vision is often three clauses because a future state has parts. Length is not the measure. Whether it excludes something is." } }, { "@type": "Question", "name": "What are Blue Goat Cyber's mission and vision?", "acceptedAnswer": { "@type": "Answer", "text": "Our vision is a future where connected medical devices are secure by design, trusted in clinical environments, and resilient over time. Our mission is to deliver medical device cybersecurity services that reduce review friction, strengthen real-world security, and support FDA expectations across the product lifecycle. The purpose underneath both is to protect patients." } } ] } ] --- [Skip to content](#main) [](/) [About](/about)[Speaking](/speaking)[Cybersecurity](/cybersecurity)[Programs](/programs)[Books](/books)[Media](/media) Writing Search Ctrl K[Connect](/connect) [Leadership](/blog/category/leadership) # Mission vs Vision vs Purpose July 25, 2026 6 min read 1,226 words Most companies treat mission, vision, and purpose as three fonts for the same paragraph. They answer three different questions, and the difference decides what work you turn down. Here is the version I use, and the three statements behind Blue Goat Cyber. ![A dim hospital room at dawn, an empty bed and a connected patient monitor glowing beside it, blue light through window blinds.](/blog/mission-vision-purpose-hero.jpg) Published July 25, 2026 Read time 6 min In this essay 1. [01 What most companies actually put on their website ](#what-most-companies-actually-put-on-their-website) 2. [02 The three questions ](#the-three-questions) 3. [03 Blue Goat Cyber's three, and why they are worded that way ](#blue-goat-cybers-three-and-why-they-are-worded-that-way) 4. [04 Write yours so they can fail ](#write-yours-so-they-can-fail) Jump to 1. [01 What most companies actually put on their website ](#what-most-companies-actually-put-on-their-website) 2. [02 The three questions ](#the-three-questions) 3. [03 Blue Goat Cyber's three, and why they are worded that way ](#blue-goat-cybers-three-and-why-they-are-worded-that-way) 4. [04 Write yours so they can fail ](#write-yours-so-they-can-fail) The takeaways 1. 01 Purpose, vision, and mission answer three different questions: why you exist, what world you are building, and what you do today. Collapsing them into one noble paragraph is why nobody can use them. What to do next Write your three statements on separate lines and check that each answers a different question. 2. 02 The test of a real statement is refusal. If it cannot lose you a deal, it is decoration. What to do next Hold your mission up against the last three opportunities you accepted and see whether it would have rejected any of them. 3. 03 Purpose comes from your history, not the industry's vocabulary. Blue Goat Cyber's purpose is two words, protect patients, and it came from a hospital monitor rather than a branding session. What to do next Find the specific moment that made you start this company and write the purpose from that scene. 4. 04 A vision is a photograph of a future you do not appear in. If your product or your name is in the frame, you wrote an ambition. What to do next Rewrite your vision until it describes a world rather than an activity, then remove yourself from it. Editor's note The hospital scene is my own, after selling Alpine Security in 2020 and before founding Blue Goat Cyber in 2022. The vision and mission quoted here are the wording Blue Goat Cyber uses today. A few years ago I woke up in a hospital room with a monitor beside the bed drawing a line across a screen every time my heart beat. I had sold Alpine Security in 2020. I had spent years testing medical devices, writing reports about them, arguing with engineers about them. And in that room, for the first time, I was on the other side of the equipment. The device was not a line item in a submission. It was the thing telling a nurse whether I was fine. I remember thinking something that had nothing to do with strategy: someone wrote the code in that box. Someone decided how much to test it. Someone decided whether to fix the finding or ship the release. That is the moment Blue Goat Cyber came out of. Not a planning retreat. Not a whiteboard. A room where the technology was working on me instead of for a client. I bring that up because most companies write their mission, vision, and purpose statements in the opposite order. They start with the whiteboard, produce three paragraphs of noble language, put them on an About page, and never think about them again. ## What most companies actually put on their website Go read the About page of almost any company in any industry. You will find some version of this: "Our mission is to leverage innovative, best-in-class solutions to empower our customers and deliver exceptional value while fostering a culture of excellence and integrity." I have read that sentence three hundred times with different nouns swapped in. It has a specific tell: you could paste it onto a competitor's site and nobody would notice. It commits to nothing, so it cannot be failed, so it cannot be used. Then, right beneath it, three headings that all say roughly the same thing in slightly different fonts. Mission. Vision. Values. Sometimes purpose, sometimes "our why." The words are treated as synonyms for the general idea that the company is good and means well. They are not synonyms. They answer three different questions, and the difference is the whole point. ## The three questions Here is the version I use, stripped down to what each one is for. **Purpose is why you exist.** It is the reason the work matters if you strip out revenue, headcount, and logos. Purpose does not change when the strategy changes. It usually predates the company. **Vision is the world you are trying to create.** It is a future state, not an activity. You should be able to picture it, and you should not be in the picture. Vision is a destination you might not reach, which is what makes it worth pointing at. **Mission is what you do about it, now.** It is operational. It names the work, the audience, and the outcome. A mission you cannot hold a decision up against is not a mission, it is a mood. Statement Question it answers Fails when Purpose Why do we exist at all? It could belong to any company in any sector Vision What does the world look like if we win? It describes activity instead of a future state Mission What do we do, for whom, starting today? You cannot use it to say no to something The test I care about is the last column. A real statement kills options. If your mission does not rule out work you could plausibly take, it is decoration. ## Blue Goat Cyber's three, and why they are worded that way We only do one thing at Blue Goat Cyber, and the statements are written to keep it that way. **Purpose: protect patients.** That is it. Two words, and they came from the hospital room, not from a branding session. Everything downstream has to serve a person who is attached to a device and has no idea we exist. Notice what purpose does not mention: FDA, submissions, pentests, revenue. Those are all methods. Methods change. The patient does not. **Vision: a future where connected medical devices are secure by design, trusted in clinical environments, and resilient over time.** Three clauses, and each one is doing work. _Secure by design_ means the security shows up during development, not the week before submission. _Trusted in clinical environments_ means the people using the device do not have to think about it. _Resilient over time_ means it holds up after launch, which is where most of MedTech actually fails. That is a world, not a task list, and we are not the hero of it. **Mission: deliver medical device cybersecurity services that reduce review friction, strengthen real-world security, and support FDA expectations across the product lifecycle.** This one is deliberately narrow. It says medical device. It says across the lifecycle, premarket and postmarket both. It commits to two outcomes that pull against each other in practice: getting through review and being genuinely more secure. Plenty of firms will do one. The mission says we owe the client both. Here is how you know these are load-bearing rather than decorative: they cost us money. A financial services firm asks us to run a network pentest, and it is real revenue for work we are fully capable of doing. The mission says medical device, so the answer is no, and we refer it out. A client wants a report that will satisfy a reviewer while a known weakness stays in the product. Vision says secure by design, so the answer is also no. That is the function of these statements. Not inspiration. Refusal. ## Write yours so they can fail If you are drafting these for your own company, three moves fix most of it. Start with the purpose, and go find it in your own history rather than in the industry's vocabulary. Whatever made you start this instead of something easier is closer to the truth than anything you will generate in a conference room. Mine was a hospital monitor. Yours is somewhere in the story of why you left the last job. Write the vision as a photograph of a future you do not appear in. If your name or your product is in the frame, you have written an ambition, not a vision. Then write the mission until it can lose you a deal. Name the audience narrowly enough to exclude someone. Name the outcome specifically enough that a client could tell you that you missed it. Read it back and ask the only question that matters: what does this stop us from doing? If the answer is nothing, you did not write a mission. You wrote wallpaper, and wallpaper is what everyone else already has on their About page. The three statements are not a branding exercise. They are the decision-making layer of the company, written down in advance so that you do not have to relitigate who you are every time money is on the table. Get them honest and they do the arguing for you. > “A mission that does not rule out work you could plausibly take is not a mission. It is wallpaper.” Sit with this - What work could your current mission statement force you to turn down, and have you ever turned it down? - If you deleted your product from your vision statement, would anything be left? - Where in your own history does your purpose actually come from? Frequently asked ### What is the difference between mission and vision? ### Do you really need all three, or is one enough? ### How long should each statement be? ### What are Blue Goat Cyber's mission and vision? ### Need this applied to medical device security? Blue Goat Cyber does one thing: medical device cybersecurity, premarket through postmarket, with clearance-committed engagements. [See the work](/cybersecurity) Share this essay [X ](https://twitter.com/intent/tweet?url=https%3A%2F%2Fchristianespinosa.com%2Fblog%2Fmission-vs-vision-vs-purpose&text=Mission%20vs%20Vision%20vs%20Purpose) [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fchristianespinosa.com%2Fblog%2Fmission-vs-vision-vs-purpose) [Facebook](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fchristianespinosa.com%2Fblog%2Fmission-vs-vision-vs-purpose) [Email](mailto:?subject=Mission%20vs%20Vision%20vs%20Purpose&body=https%3A%2F%2Fchristianespinosa.com%2Fblog%2Fmission-vs-vision-vs-purpose)Copy link ![Christian Espinosa, headshot](/__l5e/assets-v1/de07e44b-a8e0-4bcc-bcb0-13aec15421f1/headshot-front.jpg) About the author [Christian Espinosa](/about) · Founder & CEO, Blue Goat Cyber Christian is the founder and CEO of Blue Goat Cyber, a medical device cybersecurity firm. He is an Air Force Academy graduate, 24x Ironman, climber of two of the Seven Summits, and the author of The Smartest Person in the Room and The In-Between: Life in the Micro. Keep reading - [ ### The Primary Question That Shapes Your Life The personal version of the same exercise: the question running under your identity is your purpose statement, whether you wrote it down or not. Read essay → ](/blog/the-primary-question-that-shapes-your-life) - [ ### Get To Versus Have To Two words that decide whether you are the author of your work, which is the same thing a real mission does for a company. Read essay → ](/blog/get-to-versus-have-to) - [ ### Beliefs, Principles, and Values The layer below: how the three statements turn into behavior anyone on the team can be held to. Read essay → ](/blog/beliefs-principles-and-values) [← Previous essay Get To Versus Have To ](/blog/get-to-versus-have-to)[Next essay → Beliefs, Principles, and Values ](/blog/beliefs-principles-and-values) Related, Cybersecurity ### Need medical-device or offensive security expertise? Blue Goat Cyber, Christian's firm, runs FDA-aligned premarket submissions, penetration testing, and SBOM/SOUP analysis for medtech and high-stakes industries. [Explore Blue Goat Cyber](/cybersecurity) Christian Espinosa Bestselling author, keynote speaker, and Founding CEO of [Blue Goat Cyber](https://bluegoatcyber.com/). Helping technical leaders develop the soft skills that turn brilliance into impact. [](https://www.linkedin.com/in/christianespinosa/)[](https://x.com/Ironracer)[](https://www.instagram.com/christian.espinosa.official/)[](https://www.youtube.com/@ChristianEspinosaOfficial)[](https://www.facebook.com/christian.espinosa.official) Explore - [About](/about) - [Timeline](/timeline) - [Speaking](/speaking) - [Cybersecurity](/cybersecurity) - [Programs](/programs) Read - [Books](/books) - [Guides](/guides) - [Blog](/blog) - [Media](/media) - [Podcast Interviews](/podcasts) - [Success Stories](/success-stories) Connect - [Contact Christian](/connect) - [LinkedIn ↗](https://www.linkedin.com/in/christianespinosa/) - [Blue Goat Cyber ↗](https://bluegoatcyber.com/) - [Resources](/resources) © 2026 Christian Espinosa. All rights reserved. [Privacy](/privacy-policy)[Terms](/terms-of-use)