The goal of your information security program should not be "more security." The goal should be *just enough* security, and a strong feedback loop leveraging the security team to identify the root cause of incidents. Learning are used to improve IT, not to justify more security.

Keith

@kwm

The best security solutions result in improvements to the systems that they are designed to protect.

1/1/2018, 9:57:09 PM

Favs: 6

Retweets: 2

link

Keith

@kwm

The goal of your information security program should not be "more security." The goal should be *just enough* security, and a strong feedback loop leveraging the security team to identify the root cause of incidents. Learning are used to improve IT, not to justify more security.

1/1/2018, 10:03:19 PM

Favs: 13

Retweets: 9

link

Keith

@kwm

If offense informs defense, then defense informs information technology. This is the only logical and sustainable cycle.

1/1/2018, 10:34:54 PM

Favs: 6

Retweets: 0

link