I agree with you, and I've been into information security now for more than half of my life. I think there was a time where the insider threat held merit. Just

I agree with you, and I've been into information security now for more than half of my life. I think there was a time where the insider threat held merit. Just yesterday, though, I was able to propose a solution for the developers in my company that will at once make their code deployments more efficient, make build-out of new worker nodes a lot easier and improve the overall security of our enterprise while earning us some major points for PCI compliance. That's what security should be about. Note: Compliance and security aren't inclusive, so it's worth mentioning them separately.