So, You Think That Security Is ...
.. about
a) fighting nefarious hackers
OR
b) protecting information
Now, if you ask as many of our colleagues about this, do you think you'd have more of "a)"-people or "b)"-people? Any bets on the percentages?
Just a random thought of the day...
a) fighting nefarious hackers
OR
b) protecting information
Now, if you ask as many of our colleagues about this, do you think you'd have more of "a)"-people or "b)"-people? Any bets on the percentages?
Just a random thought of the day...
Comments
c). The vulnerability component (controls vs. threat capabilities) of risk management.
:)
This is a very nice question. It all boils down to what can be controlled and what can't be. Protecting information is something we can control. Fighting hackers is not a wise game to choose, they are all over and is something that you can't conrol.
And that is in addition to all the people who simply (dumbly?) equate infosec with "[malicious] hacker-fighting"...