Re: The biggest thing affecting software security? People, apparently.

[Steve Milner <smilner () trinityz com>]

Nick Murison wrote:

> Hi all,
>
> www.threatsandcountermeasures.com just closed their poll on what people
> thought was the biggest thing affecting software security.  The results were:
>
> People:     80.3%
> Process:    18.2%
> Technology:  1.5%
>
> Results also available from www.threatsandcountermeasures.com/PastPolls.aspx.
>
> If this is the case, then why is there such a huge financial investment in
> security technology?  Is the human factor expected to magically improves once
> we've got the "right" technology?
>  
No, but people are the hardest thing to patch. You can inform them, you 
can work with them, you can even threaten them to follow good security 
practices but someone always constitutes for the weakest link in the chain.

Steve