Sunday, 21 June 2015

How can you secure something without locking it?

First: Companies and users are complacent!
Second: They don't want to accept their responsibility!

Depending on what we want to secure and who we want to secure it from, there are ways, for example:
Let's make some simple easy to follow analogies.

We have a bunch of chickens and we want to protect them from Foxes. 
Things to consider: 
  • Do we believe in foxes?
  • Will they attack our chickens?
  • What is the likelihood of our chickens being attacked? 
  • Is the garden open, without a fence or even with a natural fence?
If we don't believe in foxes, there is no chance we will believe or think our chickens will be attacked by foxes! So nothing will be done to protect the poor chickens.

Let's say we do believe in foxes, because we know they exist, we've heard on the news, but the way we operate or think is about probabilities. What are the chances of the chickens being attacked by foxes?
Take a chance or not?

Let's say we believe in foxes and half-hearted want to do something, to convince ourselves we did something.
Let's erect a fence, this should keep foxes out, really?!

Important: 
  • Know what you need to protect
  • Protect from what
  • How important is what we are trying to protect? 

In the case scenario above, are foxes the only thing we have to worry about?
How about thieves?
How about diseases?
How about what predators?

Also Important is Acceptance!
  1. We do not know everything
  2. The scenarios change
  3. The danger changes
If we think a fence is good enough, let's explore this a bit. 
We erected a fence, chickens are happily protected in the garden, foxes out, but for how long?
All it needs is:
  • Gate left open 
  • Some panels in the fence start to rotten and break, 
  • Holes in the fence.....
Then you wake up the following day and one of your chickens gone, eaten by the beautiful fox? Maybe!

What needs to be done right away?
  1. Investigation, check the fence, check signs of feathers in the garden, 
  2. Fix the fence, and now armed with the knowledge a fence is not enough
  3. Build a small house to keep the chickens over night. IMPORTANT!!!
  4. Put a lock on the gate
  5. Instruct everyone to keep the gate locked. Procedure!
I believe this shows to you the necessity of making sure you are watching what is going on with your chickens. Monitoring!


If we cannot find any evidence the chicken has been eaten by a fox, should we assume:
1. The chicken has gone voluntarily?
2. The chicken has been abducted by aliens?

This is what I expect to be done:
1. Inspect the whole fence, fix it it if need
2. Build a little house to protect the chickens over night
3. Put a lock on the gates and don't share with everyone
4. Assign someone to check the chickens frequently and count them
5. Put a system to watch the chickens day and night
6. Don't let anyone near the chickens if they have not been well trained
7.Having Systems in place is good, but a team has to be monitoring and watching, and they also need to know what to do in case of a breach happens.

Let's say someone is coming over the fence during the day, we have all these protections, but no one is actually paying attention. If you have someone watching and they see a criminal jumping over the fence, if they are not trained in what to do or how to do, again nothing will happen.
The minimum you can train them to is: If someone is trying to jump over the fence SCREAM LOUD!!!! THIEF!!! this might scare them off.

Let's say you have a diamond and you want to protect it.
There are some options and it is up to you to evaluate the pros and cons and chose the best for your environment.
1. You can put the diamond in a safe box in a bank
2. You can buy a safe and keep it at home
3. You can dig a hole and bury it

Would you leave your diamond on your desk overnight?
These are just some thought open for discussion, if you want to comment and pick it apart and or make suggestions, let's discuss it.






No comments:

Post a Comment