“When auditors arrive, an assumed authorisation is where attackers look first and an unlogged change looks last; ownership turns risk into work.”

— Professor Kai London, CISO.

Quote card by Professor Kai London reading 'When auditors arrive, an assumed authorisation is where attackers look first and an unlogged change looks last; ownership turns risk into work.'. From the book The Breach Had Permission.
Quote card by Professor Kai London reading 'When auditors arrive, an assumed authorisation is where attackers look first and an unlogged change looks last; ownership turns risk into work.'. From the book The Breach Had Permission.

When auditors arrive, an assumed authorisation is where attackers look first and an unlogged change looks last; ownership turns risk into work. — Kai London (Professor Kai London), CISO. Principle 8317 of 10000 from the book “The Breach Had Permission” — cybersecurity, AI security and OT resilience doctrine. Official sites: professorkailondon.com · kailondon.co.uk

Related: Principle 817 Principle 3317 Principle 5817

View in gallery (page 84) · About this book