abhiminator

>We're paid to find risk and reduce risk.

There's a dedicated department that already does that in most organizations -- risk management.

One could argue that 'cybersecurity' ought to be a component of 'risk management' versus being on its own which only adds to bloated organization structure and increases bureaucratic complexity.

Seems like a rage-bait title, but I kind of agree with the general premise that cybersecurity teams shouldn't treat themselves as solving unique problems that other auxiliary teams (like SRE/platform engineering) haven't already come across and/or already solved.

I am of the opinion that this massive push by big organizations (coupled with mandates for C-suite roles like CISO) into building a dedicated army of staffers for "cybersecurity" feels like just another attempt to bloat up the size of an organization and create more 'bullshit' jobs, as David Graeber put it over half a decade ago.

It's almost like you're teleported into browsing a different, parallel (and a way worse) web with a shitty UX when you turn off your ad-blocker.

Reminds me of Russ Hanneman's obsession with the three commas and the 'Tres Comas' tequila from HBO'S Silicon Valley.

I'm hindsight, it's crazy how accurate that show was in portraying a lot of the VC and Silicon Valley folks in general.

These are all symptoms of the end of 'cheap' money essentially. World's been running on QE for a long time now, and most millennials and Gen Z folks (myself included) haven't seen/lived in a world without QE.

This is all regression toward the mean. The next couple years should be interesting.