No mention of governance, short shrift on risk without mention of either appetite/tolerance or acceptance, and lip service for auth/with, without mention of eit

No mention of governance, short shrift on risk without mention of either appetite/tolerance or acceptance, and lip service for auth/with, without mention of either identity or credential assurance. Infosec without these isn’t, it’s technologists playing with their favourite toys, ignoring what it takes to make organizations and systems secure. * whatever that means if we lack risk management (including assessment, mitigation, tolerance, and acceptance).