Re:I'm not burned out, I'm pissed off
by Aeolun on Wednesday November 27, 2019 @03:59AM
(#21646347)
Conversely, in a lot of industries the security department is only there to prevent you from doing everything you need to do, even if the threat and attack surface are both minimal.
[ Parent
| on HN ]
Re:I'm not burned out, I'm pissed off
by davidgl on Wednesday November 27, 2019 @04:42AM
(#21646512)
Agreed, too often security people are incentivised to make a massive fuss over tiny issues, and then often don't seem to understand that security is just one of many requirements needing to balanced
Re:I'm not burned out, I'm pissed off
by meloentje on Wednesday November 27, 2019 @07:36AM
(#21647334)
So much this. In addition, these tiny issues are often purely technical in nature. I still have to meet the first security engineer who is able to identify informations security risks at the business level and view vulnerabilities in their proper context.
So true! Security people think the end goal of the company is a secure system. No. The end goal of the company is a product that customers want to buy. And it's hard to build said product when security hinders you at every turn.