← @kwm Twitter archive
Keith
@kwm
As a security team your job is to protect two things: data and identity.
10/2/2017, 9:40:00 PM
Favs: 52
Retweets: 16
linkKeith
@kwm
There's an argument to be made that infosec really only aims to protect data, and protecting identity is a means to that end. Still . . .
10/2/2017, 9:41:06 PM
Favs: 0
Retweets: 0
linkKeith
@kwm
To the extent that infosec protects networks, endpoints, or applications, those are merely vectors used to compromise data and/or identity.
10/2/2017, 9:41:23 PM
Favs: 0
Retweets: 0
linkKeith
@kwm
Vulnerability management: Activity aimed at protecting data and/or identity that matters. Systems with neither are systems you turn off.
10/2/2017, 9:41:46 PM
Favs: 0
Retweets: 0
linkKeith
@kwm
Threat modeling is critical to infosec because, if you don't know what you're protecting, why, and from whom . . . you're not protecting it.
10/2/2017, 9:43:33 PM
Favs: 1
Retweets: 0
link