The impact of security

The common approach to security — and perhaps the necessity — is that we must consistently interrupt people, demanding time, attention and thought. Emails, presentations, required training — all take time. That means people need to invest their time, energy and focus into the concepts we share, technologies we install and processes we enforce.

Ideally, each interaction addresses individual concerns and provides value in excess of the time invested. Unfortunately, that's a rare occurrence across the security industry today.

Even though our efforts are designed with the best of intentions, we end up creating a condition where people have to allocate time they don't think they have in the name of "security."

People depend on us, but whether we realize it or not, we depend on them, too. We're all in this together, and taking time to acknowledge someone contributing to our success is important.