3 ms·
From the viewpoint of a security practitioner and engineer I think what Bruce Potter says is really important here. Oftentimes people get hung up in fixing or
by ejcx 11y ago
From the viewpoint of a security practitioner and engineer I think what Bruce Potter says is really important here.
Oftentimes people get hung up in fixing or doing things that are important to do for security, but not a pressing matter, and they may miss more important issues because of this.
There are a lot of security folk who worry about things that make very little difference and it not only makes me think less of them but it also is more noise and less signal. It means businesses have a harder time taking security people seriously whenany constantly worry about the wrong things.
- pjungwir 11y agoThe most interesting security guy I know comes from an accounting/auditing background. The similarities are amazing, especially they way they deal with risk. He's one of the few security people I know who treat security as a non-absolute, with tradeoffs in other domains. Also he tends of think about things at a higher level: not just what tools should we use, but what policies should we have, how should we encourage and audit compliance, how can we measure the real organizational benefit of policy changes, etc.