The security of a system is always about the cost to attack versus the cost to defend.
It's all relative. A risk strategy because no system can be made perfectly secure. Not even one using quantum technology.
A successful cyber security program will have already found this risk breakpoint and is now saving a lot of money, wasting little on 'coverage'.
It's a systemic tragedy that regulators refuse to come to terms with this and compel businesses to untold wastage by fiat.
This forbidden knowledge may well also apply to fields outside of cyber security, such as national security and others.
My view on security has always been radical though. I believe there is a 'total market size' for theft or things which need to be made secure.
Meaning theft will always have a floor and a ceiling. And will not decline or grow beyond these thresholds. So it's pointless trying to reduce crime unless we've first decided to fundamentally change society as a 'whole world function'. And if we decide not to change, that would be classified in psychological terms as a neurosis.
And so it goes...
This total market size is based indirectly on how we deliberately choose to run society. In other words, theft is only a thing, because we the people have insisted on its existence as it stands now, exactly because of how we choose to configure society. It belongs to us, both the good and the bad and there's no escaping this if you're a rational person.
This is not just a thief problem. It is a 'whole world problem' in which we're all complicit and cannot escape from.
There is a remedy, commit to radical change. You have total power to do this immediately, so do not dismiss this out of hand as foolish dreams - the door is open right there in front of you. You have no power at all to change other people and that certainly is the ideology of a foolish dreamer who causes so much harm to their descendants.
#cybersecurity #politics #economics