Change is Hard

There’s a strong argument that security comes about through negotiation, rather than calculation. If so, then it might be more productive to see the process of arriving at the state of security as a discussion between stakeholders.

However, the current situation isn’t so much a negotiation. It’s more a lecture.

Having a single very loud voice in the room telling everyone else what security looks like, is nowhere near a discussion.

Why Security Change is Hard