Old rules, old decisions, old mistakes, new costs
Posted in Business, Security Architecture, Security metrics on Nov 20th, 2022
Something I see in almost every organisation I work with: security rules and decisions that made sense once and nobody has questioned since. Passwords that must be changed every 60 days, which only makes people choose weaker passwords with a number at the end. A firewall rule opened for a project that ended in 2015. […]