Security controls

Today, we are putting the weapons on the walls.

We are looking at network security controls.

If you are gunning for the Security Plus, CEH, or the CISSP, you need to understand that a firewall is not just a box.

It is a policy enforcement engine.

And, like, this has been well studied even within the cybersecurity kind of awareness space.

I think even Gartner had a stat that like 72% of employees admit to bypassing or working around security controls in order to get a job done.

And I think that the danger is that y- you know, man, we've all heard this sort of, this, this kind of trope of, like, the stupid user or, or, like, everyone in my organization is a threat to me.

This is not really about malice.

It, it's not about people being nefarious either.

It really just is that tension of incentives, right? Your employees are not incentivized first and foremost to do the most secure thing.

Your workforce is incentivized first and foremost to get their job done, and if your security policies and your security controls are too inflexible, and they, they prevent people or inhibit people from getting that work done without a good reason or good justification or explanation, people are gonna gladly work around this.

And, and I don't think that this...