4 ms·
While the evidence is light. Is anyone surprised if this is true? My experience is that most cybersecurity firms are only slightly better than other enterprises
by ec664 6y ago
While the evidence is light. Is anyone surprised if this is true? My experience is that most cybersecurity firms are only slightly better than other enterprises. They often have lofty standards that they themselves don't follow.
They also have professional service arms that are similar to the rest of the industry. Handful of senior people and an army of junior engineers that bias towards velocity over quality (i.e. take shortcuts that can lead to data exposure and other issues)
- duxup 6y agoI know an attorney who was quite capable legally and with tech and spent his career in both. He ended up at a legal organization that also dealt with security. The cybersecurity industry is absolutely full of crappy security companies worth jack squat. The legal industry is full of Luddites. Being capable in both areas = some serious demand / profit.
- roel_v 6y agoYeah I don't really agree. I have both software engineering and law degrees and would love to do something on the nexus tech/law/security but there are very few jobs where deep knowledge of several is a real plus. It's at best an 'oh that's nice' level thing. I'm open to jobs in the south of The Netherlands, eastern Belgium or western Germany if anyone is looking :)
- duxup 6y agoI think the lack of demand on an individual level is different as companies don't value it. But when companies need help and they look to an outside company to come in and help, then they're willing to pay incredible amounts.
- staticassertion 6y ago> My experience is that most cybersecurity firms are only slightly better than other enterprises. They're often worse. I can't recall the study, but one of them looked across industries at software quality, and security products were statistically worse than others. Of course such studies are hard to really feel confidence in, but it isn't surprising.