Move Your Gun

You have to move your gun to hit the duck.

I present a sketch with a gun as security and a duck as an attacker.

Risk is not static.

Attackers move.

Technology changes.

Business evolves.

If you have a fixed security mindset, you will miss the duck.

Security is not a set-and-forget strategy.

It’s a living thing.

Attackers are dynamic.

Threats don’t stay still.

The target is on the move, all the time.

So must we.

When they change direction, we also learn, adapt and move.

Controls and policies cannot be static.

It must evolve to match the direction.