Re: Risk management and security theatre

["Blanchard, Michael (InfoSec)" <michael.blanchard () emc com>]

I still don't like to fly....  prolly a control thing more than a safety thing....

But the statistics do allow me to rationalize the safety of flying and that lets me actually board a plane to Vegas 
once a year :-)

Michael P. Blanchard
Principal Security Engineer, CISSP, GCIH, CCSA-NGX, MCSE
Cyber Security Services
EMC ² Corporation
32 Coslin Drive
Southboro, MA 01772


-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On Behalf Of Rob, grandpa of Ryan, Trevor, 
Devon & Hannah
Sent: Monday, September 09, 2013 12:52 PM
To: funsec () linuxbox org
Subject: [funsec] Risk management and security theatre

Bruce Schneier is often outrageous, these days, but generally worth reading.  In a 
piece for Forbes in late August, he made the point that, due to fear and the extra 
trouble casued by TSA regulations, more people were driving rather than flying, 
and, thus, more people were dying.

https://www.schneier.com/blog/archives/2013/09/excess_automobi.html

"The inconvenience of extra passenger screening and added costs at airports after 
9/11 cause many short-haul passengers to drive to their destination instead, and, 
since airline travel is far safer than car travel, this has led to an increase of 500 
U.S. traffic fatalities per year."

So, by six years after the event, the TSA had killed more US citizens than had the 
terrorists.  And continues to kill them.

Given the recent NSA revelations, I suppose this will sound like more US-bashing, 
but I don't see it that way.  It's another example of the importance of *real* risk 
management, taking all factors into account.

======================  (quote inserted randomly by Pegasus Mailer)
rslade () vcn bc ca     slade () victoria tc ca     rslade () computercrime org
Book (n): a utensil used to pass time while waiting for TV repair.
victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
http://blogs.securiteam.com/index.php/archives/author/p1/
http://twitter.com/rslade
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.