The Burden of Security

I found an interesting link to a weblog of an analyst that covers the industry, and was impressed by his cander and understanding of the security as it relates to the finger pointing going on in the industry. I think he said it best when he says:

"If security issues are going to be resolved it’s going to take more than finger pointing at the folks in Redmond. IT managers need to take accountability for their systems, software vendors for the correct installation and maintenance of their programs and consumers for their households. This is the price of the enablement provided by a digital lifestyle."

So true, yet so false. Security is NOT a technology problem alone, it is more a business problem. Dealing with security is to deal with risk mitigation, and that goes beyond any single product or vendor. I always regurgitate Bruce when I say "Security is a process, not a product".... and that is because it's so true. Microsoft is only one vector of the problem. There is so much other things to consider.