While I understand that the skills listed are not exhaustive they are naked -- or rather useless, even when combined, unless you know and understand how to apply basic tenets of security that have been around since time immemorial. These principles are barely given notice and hardly ever expounded upon though they provide the greatest benefits to security. Of course this may explain a total lack of these in general and explains the general state of dismal security we have today:
Security Principles such as:
Least Privilege
Layered Defense Models
Segmentation
Visibility
Resiliency
Logging or Auditing
Trusted Transactions
Separation of Duties
Rotation of Duties
Dual controls
Ownership
Best Practices and Due Diligence

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/464/34951#34951