I have privileged view on this in trying to help architect security across a massive env. My problem is not Security staff skills. They are amazing.
My #1 issue is evangelization of secure Operations staff practices and small-scale architecture. Like designing AD group roles.
My #1 issue is evangelization of secure Operations staff practices and small-scale architecture. Like designing AD group roles.
https://twitter.com/0xdade/status/1379249291802202112
I would rather work in Operations. Security is great but it's not my dream job. I want to be implementing robot systems and doing on-the-floor problem solving. Seeing what I do build things.
Right now my skillset pushed me into Security. But what I do should be Operations norm.
Right now my skillset pushed me into Security. But what I do should be Operations norm.
Look, there cannot ever be enough senior security architects in the world to individually design every production system for security, the way stuff is handled now.
We need pervasive basic competency on the floor, delegation at mid-tier, and designs that allow that at high-tier
We need pervasive basic competency on the floor, delegation at mid-tier, and designs that allow that at high-tier
I spent 10 years in Helpdesk, and wherever I can now, find excuses to support individual users. Today I fixed a Temp folder issue in something blamed on our antivirus. It was fun.
There's a lot of disempowerment the lower you go. 'Allow All' because you can't manage 'Allow Some'
There's a lot of disempowerment the lower you go. 'Allow All' because you can't manage 'Allow Some'
• • •
Missing some Tweet in this thread? You can try to
force a refresh
