Re: Security, a process on a timeline
Broadway0474, it can definitely be unsettling to acquiese that despite our best efforts threats will get through. The goal is not necessarily to passively accept it, but to do two things. First, put measures in place so we can understand what happened when something gets through. Second, armed with that knowledge, rethink our basic defenses. I liken it to a security camera. A building may have existing defenses in place: locks, burglar alarms, motion sensors, etc. A security camera cannot inherently prevent a break-in (except to the extent that it acts as a deterrent in the physical world). But with a security camera in place, one can review footage and quickly figure out what happened during a break in. Many organizations ignore this after phase. So, they are never able to respond to existing breaches (allowing those breaches to do far more damage than they would have otherwise been able to do). More so, they don't have insight into how to put up better defenses (allowing the bad guys to exploit some of the same holes over and over again). I hope this helps clarify my position.