Recently I was consulting on site. The task was easy enough in that the parameter was to write a specification. The issue arose when I needed to interact with another worker. The security specification was to work directly with his application. After working with him and attempting to explain why security was actually important, giving examples, etc., I was told directly that my security was "trampling" on his progress. As this sunk in, the conversation turned to another topic.
People in the enterprise are still having issues grasping the importance of security and their memories continue to lapse as it pertains to the breaches, the direct and indirect liability, and the short term loss of rapport with the community as the story breaks.
There continues to need to be the focus on security and its application to the enterprise along with applications. As long as management views this as a hindrance and a checked box, there will continue to be extensive issues.
Thank you.
