8 Security De-engineering
and monitored policy compliance). Certainly there was no market for
Big Four outside the banking sector and telecommunications. is
was not because we were too expensive (which we were)—there was
actually no market for any security service provider, as in no demand
whatsoever for any corporate information security services.
Another driving force for security spending is the good old “what
are my competitors doing?” factor. Going back to the early 2000s,
on professional service engagements, TSAP clients would demand to
know how their security posture stacked up against rms in the same
industry sector, and they asked for the statistics to be included in the
report.
ere was one project I remember clearly because of the ...