« Avoiding "Mission Accomplished" Phenomenon in Threat Modeling | Main | RSA Debrief Part 1 »



On Security ... we could perhaps cannibalise the expression to say "a good business with fair security beats a fair business with good security."

The issue is that security is the business's job, not someone else's. Security specialists, security teams, security consultants aren't the issue, it is frontline in your company that is at issue. The measure is not how good your specialist is, but how broad and balanced all of the people in the company are.

The comments to this entry are closed.