Why do we need system-specific security requirements? Can't we just comply with instructions? Yes we can, and we must. But it's not enough.
A new system does new stuff (or familiar stuff in new ways) or we wouldn't bother constructing it. New stuff means new risk components (assets, threat sources, vulnerabilities) and consequently new risk. New risk means we cannot simply rely on old rules. We need to rethink how security is implemented for this very system. System-specific security requirements.
(some of) my events
- 2021-09-21--23 Northern European Emergency and Disaster Studies (presenting at conference, Östersund)
- 2021-01-27--29 Digital Humanities Now (attending conference)
- 2021-01-14 Certifierad IT-arkitekt (guest lecturing, Stockholm)
- 2020-12-11 Datorsystem (guest lecturing, Högskolan i Gävle)
- 2020-10-21--23 Samtidskonstdagarna (attending conference)
2015-04-20
Subscribe to:
Posts (Atom)
