Sometimes being a #CISO makes me a little sad. Not stressed, not frustrated - sad.
It’s the days when I fail to convince some part of the business to improve their #security posture in some fully critical way, on the #BCP / #DR level, and the manager of that part of the business lets slip their true view of #infosec and #IT:
They truly think the whole information processing infrastructure they use every millisecond of their work is fully replaceable, at will. That no intricate and evolved symbiosis is there. So rather than GAF about securing it, they’d rather ”just replace it if it breaks”.
These are smart highpowered people, but utterly priviliged in the way they can afford to think their unique skills will offer them a new job, if their negligence to be responsible in this one destroys the org.
I see many sinners in this group, but more than anywhere else among creatives - text, art and code.
A good Reality Slap might do wonders.
