From someone in IT but not cybersec it seems like a lot of people in cybersec don’t know much and are mindlessly following best practice guides or something without understanding why they do/don’t need to implement it.
I regularly see in my own life people freaking out over things that don’t apply to us or buying a million different software services. We are so many layers deep in cyber sec products but it would take 40+ days to restore from our backups…
Am I completely off base with this perception? Maybe I am putting to much weight on red team knowledge for a blue team job role.
I work in Cybersecurity. Things do not feel as secure as they should be.
I work in cloud. The amount of people who have the ability to destroy the entire internet with one command is too damned high!
Are you talking about BGP or the big DNS-, CDN- or cloud hosters?
BGP mostly. It’s really shocking!
From someone in IT but not cybersec it seems like a lot of people in cybersec don’t know much and are mindlessly following best practice guides or something without understanding why they do/don’t need to implement it.
I regularly see in my own life people freaking out over things that don’t apply to us or buying a million different software services. We are so many layers deep in cyber sec products but it would take 40+ days to restore from our backups…
Am I completely off base with this perception? Maybe I am putting to much weight on red team knowledge for a blue team job role.
If you want to feel secure, you should unlearn everything you know about security. That’s the only way.