Sunday, November 05, 2006

Low dose aspirin and red wine…

What does this have to do with InfoSec?!?!? Hear me out - and think about it...

We all are getting older, and the systems that make up our bodies age accordingly, not unlike those of the systems that we (try to) secure. On one hand, they were in great condition when first deployed, and as time went on, slowly became slower and more clogged up with the detritus of the aging process. Both systems become set in their ways and more resistant to change and less resilient to interruptions.

It occurred to me today that the current trend (maybe it will keep me alive longer) is to drink more red wine and take low dose aspirin daily. One has components from the skins of red grapes that appears to keep arteries clear, and the other keeps the platelets in our blood from clotting too easily (hence clogging up the works)

The interesting thing here is that these are at the same time, both proactive and reactive. They are proactive in the sense that we can use relatively small amounts of a substance to ward off the effects of systems. And, reactive in the way that these same substances appear to reverse to a large extend the effects of bad habits and changes in use-cases over the years

So – it’s Sunday evening and where am I going with this? It’s simple, really. What drives us (at least some of us) to bulk up on cheap Cabernet and generic 81mg aspirins? It is the desire to live longer and get ourselves back to a state where we can be effective and health, while not having to make radical changes to our habits and ways. It can be the same with the systems that we manage, maintain, and secure.

We don’t have to go for the “big fix” or the dramatic diving save, but can instead take the slower, measured path with judicious, measured application of process, policy, and personal changes. Not only does this help out with the stability of our applications, but it allows us, as InfoSec professionals, the ability to work with systems that are predictable and tolerant to slowly increased controls.

Enough for today… Now – back to that Cab resting downstairs, I can hear it calling my name….

No comments: