On Wed, 25 Jun 1997, Mark Teicher wrote:
> Office politics should not even into the equation since that takes away
> from the endless effort of learning and being current in the incredibly
> fast growing field.
I tend to disagree. There is more to security than understanding technical
minutiae and how to technically secure data. It is important, in a
corporate environment, to understand the undercurrents within the
organization, since this often allows you to either quickly unravel the
source of an attack from inside, or possibly even prevent the attack from
happeneing in the first place.
Note: I'm not saying that technical details or knowledge should be
ignored, but rather that serving as a security office in a company (as
opposed to a purely technical outside consultant or contractor) involves a
lot of social skills as well as technical skills/
> What type of strong background ?? In what particular aspects of the field
> are your referring to ??
Sounded to me like he was referring to strong background in the OS of
platform being secured. e.g if your company uses Solaris, the security
"expert" should certainly have a very strong admin/technical background in
Solaris.
References:
|
|