On my day off I decided to watch Columbiana and heard a very astute line about painting that really made me think. The line was:
“You never finish a painting… You just stop working on it.”
Which itself was paraphrased from a Leonardo da Vinci quote:
“Art is never finished, only abandoned.”
The same can be said about security:
“You never finish security, you just stop working on it.”
The unfortunate reality is that many organizations see security as having a finish line, but that’s just not the case. The only way to ‘finish’ security is to stop working on it.
This is a really nice analogy, Andrew! Yes, we totally agree that can you can never “finish” security. You can read more here about the risks of ignoring security and we advocate for the approach of “security for security’s sake”. http://blog.securityinnovation.com/blog/2011/11/s…
Security is a lifetime process so we cannot just stop securing our love ones because anything bad can happen to them.