Collectively Blind
I’ve been privy to some pretty intense exciting inter-security-team arguments discussions through my career. I’ve worked across both security compliance and security engineering, and currently operate somewhere between the two. That vantage point has shown me something uncomfortable: these teams clash constantly, and it’s not because either side is incompetent. They’re wrong in different directions, and that difference is worth paying attention to. In some ways, the fact they argue at all is the good news. It means there’s cognitive diversity in the room. The real danger is when everyone agrees. ...