With the increased emphasis on IT security related issues, and the seemingly never ending processes, reports, scans, mitigation and groups sprouting up to monitor, scan, collect and document these issues, how much has your life at work changed over the years due to it's impact. Long gone are the 'good ole days' of 'anything goes', and that's a good thing. But how may different groups and outside agencies do we need to perform the same tasks, generating yet another (sometimes misleading) report. Don't get me wrong, proper patching procedures, a good security plan, vulnerability scans and reporting are all necessary and need to be done. I've worked with some great IT security folks, but also some that seem intent on doing nothing for the 'cause' and exist solely to justify their need. I don't know how much the various industries have been affected by this trend so I thought I'd ask.
↧