3 ms·
>Jacobson oversaw a security process that began at a printing plant where pieces were made, separated by value and stored in a vault. He was responsible for tra
by vinchuco 11y ago
>Jacobson oversaw a security process that began at a printing plant where pieces were made, separated by value and stored in a vault. He was responsible for transporting those pieces...
Thinking a system is secure just because there is a process in place, however careless the design, seems like a recurring theme (society?).
I wonder if it's a psychological bias (or lack of security awareness) in the sense that you'd rather trust an system you can observe than a secure black box. Or maybe it is the fact that the workings of the system in place can act as a distraction to its possible flaws?
- thearn4 11y ago> Thinking a system is secure just because there is a process in place ISO certification in a nutshell
- jacquesm 11y agoIt's perfectly fine to put strychnine in the guacamole, as long as you document it.
- vidarh 11y agoMore like, people who misunderstand what ISO 9001 certification means in a nutshell. ISO-9001 is not meant to certify quality, but to certify that your quality management meets certain criteria, so that relevant information is recorded and made available for people to judge if if meets their requirements.
- rdtsc 11y ago> Thinking a system is secure just because there is a process in place, The importance of the process is mainly to allow passing of responsability to someone lower down the chain or sideways ("competent external contractors we hired"), then insurance takes care of the rest.