Slashdot Mirror
Security Responsibility Without the Authority?
Slashdot reader jamie submits this story about security administration. If you have the responsibility for security without the authority to make changes, your only role is to be the fall guy when something goes wrong.
On the other hand this can be very good if you are *not* the guy with the responsibility. This means that when you fuck up there is a 'blame him' guy near by. :)
Slashdot Sig. version 0.1alpha. Use at your own risk.
Anyone else want to share some of their favorite overused phrases with IT security?
My favorite phrase is "... working hard to ensure this never happens again". We usually hear that within 4 hours of a customer calling and using the phrase "you people". "You people lost my database again!" "We can assure you we are working hard to ensure this never happens again". We've had a 0 dollar buildout and maintenence budget for 4 years. They actually get MORE surprised each time something breaks, cause we're supposed to be getting better at using the tools we have.
Ok here's a different question -- anyone ever had to use their own property to band-aid something within the company about ready to explode?
slashdot: where everyone yells sarcastic metaphors to themselves to understand the issue
It's all about preconfiguring the blame
In the field of enviornmental compliance, the person 'in charge' is known as the 'designated inmate.'