Everyone who goes to their boss lobbying for more budget believes they have an honest reason for doing so. But they don’t. It’s like how everyone believes they are an above average driver. The source of this belief cannot be an honest appreciation of the facts. Therefore, it must be a dishonest belief in one’s own worth. Cybersecurity have this in spades. They’ve raised their profession into some sort of quasi-religion. Cybersecurity has become some sort of moral duty rather than a rational cost/benefit or threat analysis. They believe themselves to be of the greatest importance, and by extension, everything else in the company to be of lesser importance.
Tags: cybersecurity, economics