Category: Compliance
-
Response to the Response to Panorama
It’s been suggested that the media are to blame for mythologising cyber security. I don’t think so. The myths and distorted narrative start with an industry that presents the practice as something to be conducted solely by magicians – “It’s a dark art – most people won’t understand it”. And it is indeed a dark…
-
Change is Hard
There’s a strong argument that security comes about through negotiation, rather than calculation. If so, then it might be more productive to see the process of arriving at the state of security as a discussion between stakeholders. However, the current situation isn’t so much a negotiation. It’s more a lecture. Having a single very loud…
-
Why Security Change is Hard
Doing the Basics It’s weird. Year after year, report after report concludes that most cyber incidents could be prevented through the application of basic hygiene. I mean, it’s not weird that the reports come to that conclusion. But it is weird that it’s still being reported. Source: Microsoft Digital Defence Report 2023 In 2021 the…