I used to do assessments for a company that wanted to do them to discredit the existing IT and replace them. After awhile it really bothered me because we went after some good, hard working, dedicated people.
I decided to get some certs and marketability and find a job less 'stressful'. In studying the Code of Ethics for the CISSP, I realized that it should be my job to help dedicated people hang on to their job with instruction, training, learning, awareness.
I now work at companies with the idea that I will locate 'vulnerabilities' and correct them with the resources they currently have. I know its a stretch for some to adopt that line of thinking but in the long run, this attitude is paying off.
Slashdot Mirror
I used to do assessments for a company that wanted to do them to discredit the existing IT and replace them. After awhile it really bothered me because we went after some good, hard working, dedicated people.
I decided to get some certs and marketability and find a job less 'stressful'. In studying the Code of Ethics for the CISSP, I realized that it should be my job to help dedicated people hang on to their job with instruction, training, learning, awareness.
I now work at companies with the idea that I will locate 'vulnerabilities' and correct them with the resources they currently have. I know its a stretch for some to adopt that line of thinking but in the long run, this attitude is paying off.