I don't think that's the point. The point is that we, as security people, are misunderstood - just like the whole Bruce Green thing was. We are sunken costs to most businesses (unless we're consultants - then we're sunken costs to the clients). They see no revenue from us. We constantly ask for more resources (e.g. tools, equipment, staff, etc.). We can't justify our requests in terms on revenue like everyone else (we can only justify in terms of risk). If we do our jobs right, they don't even know we do anything all day. In short, we're big black holes.

I think he's right on the money here! In fact, I'm putting up a sign in my cube that says, "Bruce Green".

-- grep

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/186/22701#22701