Some time ago I was having a conversation about solving problems with a friend and we hit upon a clever way to think about security and why we can struggle to get certain security problems solved. We are an industry that likes to deal with security in a very tactical manner but sometimes we need to be more strategic.
We like to focus on tactical security quite a lot. What I mean by “tactical security” is when we see a security problem, we solve it. Solving problems is usually fun and comes with a sense of accomplishment. And let’s face it, solving problems is generally why most of us are able to collect a paycheck. We’re really good at solving problems.