Non-technical security rules of thumb

After nearly 20 years in the security industry, I’ve seen my fair share of the good, the bad, and the ugly.  I’ve had countless opportunities to help companies improve, but when it comes to security problem solving, I first like to frame my thinking with a couple of non-technical principles I’ve seen at the root of many security pains. If …