← @kwm Twitter archive

Keith

@kwm

As a security team your job is to protect two things: data and identity.

10/2/2017, 10:40:00 PM

Favs: 54

Retweets: 16

Keith

@kwm

There's an argument to be made that infosec really only aims to protect data, and protecting identity is a means to that end. Still . . .

10/2/2017, 10:41:06 PM

Favs: 0

Retweets: 0

Keith

@kwm

To the extent that infosec protects networks, endpoints, or applications, those are merely vectors used to compromise data and/or identity.

10/2/2017, 10:41:23 PM

Favs: 0

Retweets: 0

Keith

@kwm

Vulnerability management: Activity aimed at protecting data and/or identity that matters. Systems with neither are systems you turn off.

10/2/2017, 10:41:46 PM

Favs: 0

Retweets: 0

Keith

@kwm

Threat modeling is critical to infosec because, if you don't know what you're protecting, why, and from whom . . . you're not protecting it.

10/2/2017, 10:43:33 PM

Favs: 1

Retweets: 0