Are we doing cybersecurity wrong

摘要

Most conference talks and articles about cybersecurity in the oil and gas industry focus on two issues, educating "users", and technological solutions. Perhaps we've got it all wrong. Let's make a comparison with the physical security and policing world. Human mistakes and technology play a role here, but you hardly ever hear police officers and physical security people complain about their 'users' or ask for more technology. Physical security people just get on with their job, with the understanding that there are always vulnerable people, sophisticated criminals, and stupidity on both sides, and technology can both help and hinder. They see their job as managing the situation the best they can, with the help of common sense and human judgement.