Jon Espenschied has an amusing (or scary) piece on security claims in Computerworld:
A child with a chocolate-smeared shirt says, “I didn’t do it.” The phone rings, and Mom assures you, “There’s nothing to worry about.” A systems administrator carrying a box of tapes says, “We’ll have everything back up in a few minutes.” Sometimes the first words you hear — despite their distance from the truth — tell you everything you need to know.
That’s so with information security as well. Some words sound reassuring at first glance, but I’ve found they often point to problems safeguarding internal information assets and technical resources, or with the people and processes that protect them. Here are a few of the telltale phrases signaling that security trouble could be boiling over.
“We have a culture of security.”
No, you don’t.
Enjoy.
[tags]Security Claims, Security, Information Security[/tags]