Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
The Panacea of Information Security
Jason Miller, 2004-08-12

Step away from all the vendor hype. The one device that will always be the best tool for information security is a competent security professional.

Comments Mode:
The Panacea of Information Security 2004-08-14
Anonymous (1 replies)
The Panacea of Information Security 2004-08-17
Anominous
A lot of problems could be avoided with one simple rule: Don't implement any piece of software until you have someone who understands it.
It may be tempting to buy off-the-shelf software and get instant gratification, but if you treat the software as a magic box, you're setting yourself up for a plethora of security risks and other potential problems.

There's a reason why a good sysadmin commands a high salary -- he *understands* how things operate, and won't add anything until it's understood exactly how and why it does what it does. Increasing the salary of a bad sysadmin, outsourcing the job, or hiring more of them isn't going to give you that understanding.




[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/260/27993#27993
The Panacea of Information Security 2004-08-16
Anymouse (1 replies)







 

Privacy Statement
Copyright 2009, SecurityFocus