Accidental CISOSep 28, 2023

I don't usually recommend reading the comments on reddit, but I think we as security practitioners should read the comments on this thread and reflect on how we can do a better job of collaborating, communicating, and delivering value.

https://www.reddit.com/r/sysadmin/comments/16uqyi1/does_your_security_team_not_want_to_be/

Does your security team not want to be responsible or own ANYTHING?

Password policy? No we don’t own that. Configuration hardening standards? Nope don’t own that. Vulnerability response process? Not us....

reddit
Show threadYonae
@accidentalciso It is eye opening how many sysadmins in that thread think security does "nothing", yet in reality security has a higher burn out rate than IT.
Sep 29, 2023 at 1:49amWeb