4 ms·

Had a good friend and colleague who made an interesting point about how/why a security role can get depressing. What happens if your security program is really

• Spooky23 11y ago
  That's the paradox of security. You can be a security superstar, or a total idiot, and you may achieve the same result!
• vvanders 11y ago
  Same problem in IT. It's an inverse recognition problem.
• bgilroy26 11y ago
  I could imagine that there would be a Peter principle situation where a successful infosec professional is given progressively more difficult responsibilities as long as nothing bad happens. Is this not the case?
  • TheCowboy 11y ago
    The opposite could come into play at some companies where people start questioning the expense of your salary since you're never having to deal with successful attacks. It's hard to talk up what didn't happen. Then you have people always putting out fires who look like they're "getting shit done." It often seems like a myth when you hear about that phenomenon, but then I experienced this myself in a different role myself and became a believer. It could still be the peter principle, and that you need to better communicate your unseen accomplishments. Maybe there should be a modified peter principle, where people rise according to their ability in the job and corporate politics.
  • deadtofu 11y ago
    Or promoted into management where they implode due to being introverts who can't politic well.