Intelligence and insight that transforms capabilities into results
Is your organization underspending on information security? If you’re like most, spending on information security lags far behind other priorities. Only during the past few years has spend on information security started to increase, but it still lags behind. In this Research Report, Wellington summarizes findings from research conducted with thousands of organizations to highlight
Security's Universal Truths
There are several universal truths about security, including:
- There are no silver bullets
- There is no perimeter
- There is no security, only degrees of risk
- If you turn off the power, you might have no risk, and even then I'm not sure
- Security is not secrecy
Silver Bullets and the Long Ranger
The first one is obvious. We've been living with this - and continue to live with it - for more than three decades. Since before and after so-called "trusted systems" of thirty years ago - look it up here - and through the present, we fundamentally do not trust any one control to be an absolute when it comes to "security", a word we use with abandon.
Nevertheless, because we use the word security with abandon, it becomes short-hand for "Just fix it", "I don't have time", and "It better work" among other things. As a result, despite the fact we know rationally there are no silver bullets, our day-to-day life experience says we aim for, promise, and then fall on our swords when the silver bullets don't work their magic. By the way, who is that masked man?