The definition of insanity is continuing to do the same thing over and over again, while expecting a different result.
—Albert Einstein
Albert Einstein’s quote about insanity can be applied to a wide variety of industries and practices. However, inside of Information Security the sentiment is especially applicable to a maddening degree. I have given a number of speeches where people will push back on the content, some more forcefully than others, saying that “everyone already knows these things, they are basic best practices in Information Security.” Yet, when I challenge ...