Introduction to the Rules

Frequently, there are so many interwoven elements surrounding a given situation that the best security solution becomes obscured. This causes many organizations to make bad security decisions on a regular basis. Effective security decisions must be consistent and based on sound reasoning that balances both the immediate and long-term impacts. A decision made about one security issue should be in line with previous decisions and with those decisions that will be made in the future. Making ad hoc decisions will eventually lead to flawed security practices. Thus, security is best approached as a series of rules based on the fundamental virtues we just discussed.

Making security decisions from a standard series of logical, ...

Get Inside the Security Mind: Making the Tough Decisions now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.