Richard Bejtlich had a great tweet recently
The trustworthiness of a digital asset is limited by the owner's capability to detect incidents compromising the integrity of that asset.He went on to refine the idea a bit here. There is one other area I would like to refine in the above statement, the trustworthiness of the asset is also limited by our ability to deliver integrity to that asset. Since we have never built a high integrity system; this is worth noting as an additional opportunity for improvement.
Comments