Friday’s= Computer Security
attended a conference recently where the statement was made that there is no computer security, computer security is a goal that cannot be attained.
The context was thinking about risk management around cyber threats and computer security.
How different would your policies be if you thought there was no way to make your computer systems fully secure? Would you manage the risk differently if you thought that hackers were always in your system?
Scary thoughts, but could be a better way to think about risk identification.