Efficient Security Principle (ESP)

Efficient Security Principle (ESP)

One of the hardest things about being in information security is the frustration. The longer you’re in the field the more you’re exposed to ridiculously insecure systems that nobody seems to want to fix. We know how to fix them. We often have the money. And security people are explaining—at maximum volume—exactly how to do it. But it doesn’t happen. I’d like to propose an explanation and name for this phenomenon—the Efficient Security Principle …