Over a decade ago, Stephen Northcutt, one of the original founders of the SANS Institute, recruited me to help plan a course purely about security policies and procedures. At the time, I was all about hands-on hacking and defending, and I saw little value in a course purely focused on "paperwork."
It took me a long time to realize that without the paperwork, you don't get any real security.
No comments:
Post a Comment