Ron over at SecurityCatalyst had a great posting on our responsibilities as security professionals. He raises a great analogy that we should be like “brakes on an automobile”. To quote:
“Security allows the user (driver) to reach their goal (destination) in a safe, yet quick manner. If you (security professionals) and your customers (users) are doing it right, security should allow the business to go faster, have control, and reach their goals safely without crashing.”
That is a fantastic analogy. Now of course, we as security professionals cannot act as that brake, without significant buy in form the company. Without that buy in, this automobile has no brakes.
Thanks Ron! Sometimes these creative analogies are what it takes to bring this stuff home.