security training: "your supervisors and organization are infallible, always let them make all your security decisions"
me: <remembering all the official org policies I've seen that were objectively wrong>
The goal should be to avoid security breaches, not to manage blame.
Post
August 21, 2020