Security technology cargo cult: buy more boxes
Fear of reprisal is one of the most potent stimulants for action. It is also one that information security generally ignores. To that end the need to “improve security by buying more technology” is the prevalent course of action for most IT shops in large and small organisations. That this is just perpetuating the losing race is not a message most IT security staff are willing to concede.
There is a better way to improve information security posture of large and small organisations, and it starts by mimicking physical security, where psychology has played a significant role.