RE: Article: "Security Absurdity: The Complete, Unquestionable, And Total Failure of Information Security."

["Sadler, Connie" <Connie_Sadler () brown edu>]

I think there is a *lot* more to this, but don't have the time to fully
respond. Good things to think about - yes! But InfoSec has never had the
authority to do what's best. Ideas are floated and quickly rejected, and
the "balance" we all try to provide is as much as many of us can "push"
out against a very resistant culture.

Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC
Director, IT Security, Brown University
Box 1885, Providence, RI 02912
Office: 401-863-7266



-----Original Message-----
From: email () securityabsurdity com [mailto:email () securityabsurdity com] 
Sent: Wednesday, May 10, 2006 12:54 AM
To: security-basics () securityfocus com
Subject: Article: "Security Absurdity: The Complete, Unquestionable, And
Total Failure of Information Security."


Security Absurdity: The Complete, Unquestionable, And Total Failure of
Information Security.


A long-overdue wake up call for the information security community.


Article: http://www.securityabsurdity.com/failure.php