> The NSA, […has] a vested interest in protecting critical domestic infrastructure One of the biggest cluster of cyber attacks ever, WannaCry, is attributed to

> The NSA, […has] a vested interest in protecting critical domestic infrastructure One of the biggest cluster of cyber attacks ever, WannaCry, is attributed to NSA directly. They developed and sat on the exploit for 5 years, until it leaked, because even the NSA can be compromised. Government lives in a “we need good guys to have the biggest guns” Cold War-like mindset and are terrible role models for championing cyber security. Auditing in general is primarily used as a tool to shift liability, or “ass-covering”, and sell a false sense of security by abusing information asymmetry. That said, there’s nothing wrong with auditing when deployed within a more informed and aligned incentive structure.