Imperfect Security: Doing Less to Achieve Better Security
summary
Argues perfect security is impossible and recommends a focused, pragmatic program built on four pillars: operate in reality, be efficient, focus on people, embrace collaboration. Cites Pareto patterns (20% of bugs cause most errors), concrete stats — 68% of breaches involve humans and social engineering drives 96% of those — and budget realities (around 11% of IT spend on security, 60% cutbacks, two thirds slowing hiring). Recommends goal‑oriented work, mind the business, plan exceptions, paved paths and reducing friction; example: abandon self‑hosted Kubernetes for managed EKS.
AI-written summary · about
chapters (8)
- 0:00Introduction and background
- 1:34The myth of perfect security
- 5:50Operating in reality
- 12:32Efficiency in security
- 18:37Human-centric security
- 23:56Collaboration and teamwork
- 30:30Takeaways and final thoughts
- 33:31Q&A session
related talks
51mThinking Differently About Security
57mMaking Security Priority Zero
48mLevel Up Your Security Mindset
39mProactive Security, less buzzword, more action
46mIn Search of Security Shangri-la
16mDesigning Holistic Security Programs
03mAn infinite set of security tools
25mWhat Does it Mean to Build a Proactive Security...