The Paranoids

Information Security officers at most companies are an interesting breed. They don't trust their mothers - but many have a sense of humor. One of them told me "One of the perks of my job is I GET to see the blocked sites -)" Yes, particularly Facebook. Of course, I am not even sure he runs security or just made his title up.

Network World outlines 10 steps to prepare for a "cyberwar". It just scratches the surface. Increasingly physical and information security paths are converging. And as we outsource more and use more software as as a service, our ecosystems and supply chains often poses more of a risk and need to be protected against.

Much as I respect them, I wish security officers were more sensitive to cost and payback. As with we have seen with auditors and Sarbanes Oxley, the payback from security is as low as that from compliance.

Often the large investments just lull us into delusion.  Or derision - as you can see from the expressions and quiet complaints you hear when you stand in security lines in most airports these days.

PS - talking about cyberwars check out this on Web War One in Estonia earlier this year