The effect of investing in security depends on the actual level of security achieved in the system. It also depends on the degree of trust from my stakeholders.
Imagine a system with perfect security which - for whatever reason - isn't trusted by those who should depend on it. Their distrust might appear totally irrational to us. That doesn't matter. It's not our call. Our effort is a failure.
Putting all our money into "actual" security and ignoring the need for assurance is a recipe for failure.
(some of) my events
- 2021-09-21--23 Northern European Emergency and Disaster Studies (presenting at conference, Östersund)
- 2020-12-11 Datakommunikation och IT-säkerhet (guest lecturing, Högskolan i Gävle)
- 2020-10-22 Certifierad IT-arkitekt (guest lecturing, Stockholm)
- 2020-10-21--23 Samtidskonstdagarna (attending conference)
- 2020-09-22 RISKUT 2020 (co-hosting conference)
No comments:
Post a comment