Sunday, March 21, 2010

Bookmark and Share

Archive for the ‘By Grabthar's Hammer!!’ Category

By Grabthar’s Hammer, that’s lame

So, Network World Fusion is suggesting that all IT security folks take an oath to make sure that the “health” of the organization they service comes first. Modeled on the hippocratic oath, the author proposes some features that this oath of IT security should have. This is a novel way to grab people’s attention (indeed, it grabbed mine,) but I’m irritated after reading it because it captured my attention only to repeat the same tired platitudes that I read every day. If you’re going to say the same thing as everyone else, why not say it the same way as always so that my “noise filter” can weed it out like the rest of the ubiquitous white noise out there.

So, separating the medium from the message, the article is flawed in more than the fact that it lacks originality of content. There’s also much more to the hippocratic oath than “first, do no harm.” Actually, “first do no harm” (despite sounding good) isn’t in the oath itself – it’s too simplistic and including it in the oath detracts from the well thought out power of the oath itself. For example, does killing cells count as “harm”? What about cancer cells? How about radiation therepy that kills both cancer cells and other cells? The truth is, sometimes a tradeoff has to be made – sometimes short term “harm” leads to long term “health.” “First do no harm” does not account for these complexities where the oath in it’s traditional form does; the tenets are:

1) Pass knowledge along to other in the same profession. Impart knowledge and train others.

2) Do your best to treat the patient, never knowingly applying remedies that are known to be to the disservice of the patient. Reject anything that takes a life (not quite a simple as “do no harm”.)

3) Abstain from experimentation on a patient or putting into effect cures that are unneeded.

4) Respect the privacy of the patient.

All good things that we should keep in mind, but does the article mention them? Read it for yourself and understand my frustration.

Bookmark and Share
“Our attention to detail provides you the guidance you need to understand how a solution will really work in your environment.”
Blog Cloud

The Law: Fear It Administrative Cruft (16)
Analysts (31)
Apple (25)
AppSec (12)
Assessments (2)
Auditors (2)
Biometrics (4)
Blogs (13)
Breaches (21)
Buzzwords (2)
By Grabthar's Hammer!! (1)
Certifications (1)
Change Management (1)
Cheezburger Network (1)
Chupacabra (1)
Cloud Computing Security (4)
Collaborative Strategy Guild (2)
Compliance (4)
Copyright (9)
Credit Cards (3)
Crypto (11)
CXO Summit 2010 (1)
Cyberterrorism (2)
Data Protection (2)
DHS (25)
eBay (1)
Emergence (1)
End-to-End Encryption (2)
England (1)
Financial Fraud (1)
FISAP (1)
Forensics (5)
FTC Red Flad Rules (1)
FUD (12)
gnisreveR (2)
Google (2)
Holidays! (3)
Humor (16)
Identity Theft (4)
James Bond Shiz (1)
Legal Shiz (13)
Linux (3)
Malware (35)
Marketing and PR (9)
Messaging Security (1)
Microsoft (26)
Monoculture (3)
Mouth-Frothing (2)
Musings (17)
Open Source (3)
Oracle (21)
Outsourcing (4)
Paris Hilton (1)
Passwords (1)
PCI (4)
Phish-Eye (8)
Phones (5)
Planes (1)
Privacy (1)
Programming (1)
QDSP Blues (15)
Research (30)
Resources (6)
Rhesus Monkeys (2)
Risk Management (18)
RSA 2009 (1)
RSA 2010 (1)
SAML (1)
SAN (1)
SC Mag Blues (1)
SCADA (1)
Security Curve (8)
SecurityCurve Speaking (2)
SIEM and Log Management (5)
Social Networking (1)
SOX (1)
Speaking (2)
Spinach (1)
Spy Stuff (1)
Stealing Stuff (8)
Storage (1)
Symantec (7)
Tarot (1)
Teleological suspension of the ethical (3)
The Great Borack (1)
The Law: Fear It (10)
The Old Man of the Mountain (1)
The Regs (5)
Tokenization (1)
Useless Shizz (13)
Vendors (37)
Virtual Worlds (2)
Voting (2)
Vulnerabilities (40)
Walt Disney (2)
Wi-Fi (16)

WP Cumulus Flash tag cloud by Roy Tanck and Luke Morton requires Flash Player 9 or better.

Archives