4 ms·
You can't be serious about opsec and not take seriously the risk of an internal bad actor with access to your systems.
by cm2012 5y ago
You can't be serious about opsec and not take seriously the risk of an internal bad actor with access to your systems.
- commandlinefan 5y agoYeah, that was my thought - they treat everybody like a spy, because that's literally their job description.
- jacquesm 5y agoThe majority of the cases I'm familiar with had an internal bad actor. If you don't take that into account when formulating your security policy and threat model then you have not done your homework.