Image via Wikipedia
I was at a presentation yesterday.
One of the vendor’s speakers, I’m sorry to say, was a CISSP.
OK, he wasn’t Ian Paisley or any other radical religious zealot.
BUT his was hectoring us and telling us that the Devil is out there gathering sinners (aka botnets) and tempting us (with web sites and spam) and just watch what he says: we must open our hearts to Christ (aka his company’s products) and be SAVED by following the One True Faith (only buying his company’s products) and repenting for our sins (having is company come in and do all the scans, consulting and so forth).
I was inoculated against the religious hectoring meme at a young age, but its still fascinating to watch. But like with religion, there are always people who are susceptible, and sadly, always groups willing to give such people a platform.
To be fair, that day’s event also had some good speakers. It had some straight forward and ‘humble’ people who explained matters clearly and without drama, stated the issues and the scopes of threats and
vulnerabilities and how and why their product id what it did. All without the drama, all without the hectoring or intimidation.
Image via Wikipedia
Sometimes I wonder why we bother …
Image via Wikipedia
http://www.vancouversun.com/news/Sony+backs+cybersecurity+legislation/5030033/story.html
“If nothing else, perhaps the frequency, audacity and harmfulness of
these attacks will help encourage Congress to enact new legislation to
make the Internet a safer place for everyone,” the Sony executive said.“By working together to enact meaningful cybersecurity legislation we
can limit the threat posed to U.S. all,” he said.
To people like us, IT Audit and InfoSec types, ‘control‘ come in 3 forms
It seems that this legislation focuses on the 3rd and not the first.
It might even be seen to discourage the second.
