Confidence 2010: Security Sucks
By Eddie Schwartz (@eddieschwartz and LinkedIn)
Security today is sold by three may motivations. FUD: Fear, Uncertainty and Doubt.
Security sucks because there are certain factors that you cannot do anything about. E.g. if you get a mail from your kids school that 10 children have fallen ill to a new disease, would you open it?
Eddie further highlighted that there is a significant imbalance between the defense and offence. Offence runs broad organizations that make money from there activities (Cybercrime) whereas defense is costing organizations money just to make sure nothing happens (IT Security)
There is quite a different perception if compliance aids security between security officers and information officers.
