IT security

Content:

Original link: Cybersecurity is badly broken / LinkedIn.

Sometime in the 10's IT security moved from being a technology problem toi being a business problem. CxO's and boards started to take an interest in it. For very good reasons: IT security issues can have a devasting impact on a company.

As a result companies created or beefed up their IT security departments. That immediatetly:

hired a lot of IT security people - many with no prior IT background and just 3/6/12 months of IT security training
bought expensive security products and consulting services from a booming IT security industry
introduced a lot of processes and rules limiting what can be done

When it was worst an IT security engineer with 6 months of education and 1 year of work experience could get a senior role similar to that of a software engineer with a 4 year education and 10 years of experience.

But guess what - it did very little to actually improve security.

And about 1-2 years ago senior management (CIO's etc.) started to realize that and stopped spending like crazy with no results to show. Suddenly there were a demand to see results.

And now it looks like the IT security people themselves has started to realize that there is a problem.

IT security

Content:

Comments: