At 02:02 PM 8/4/00 -0400, Paul D. Robertson wrote:
>On Fri, 4 Aug 2000 [EMAIL PROTECTED] wrote:
>
>
> > Some magzines have value. Because CIO's read them, after they drool and
> > froth at the mouth, they sometimes shoot an email message off to IT or
> > Security, to get that vendor in so that they can hear the Snake Oil
> schpeal.
>
>If your CIO has to direct you to find a product, I'll assert that you're
>not doing your job well at all. Magazine reviews of security products
>almost *never* focus on how well those products perform a security
>function (security testing is difficult, expensive and never
>comprehensive.) I'd never choose a core INFOSEC infrastructure component
>that way, and having seen the "death by management intervention" method of
>product selection, I'd rather not go there either.
I am not saying I ever listened to them, I am just saying they looked to
hear the Snake Oil Charmer..
Most core INFOSEC infrastructure products are usually a mixture of
commercially available and some homegrown stuff to align to the zones of
control architecture or belt and suspenders type stuff.
/m
>YMMV.
>
>Paul
>-----------------------------------------------------------------------------
>Paul D. Robertson "My statements in this message are personal opinions
>[EMAIL PROTECTED] which may have no basis whatsoever in fact."
> PSB#9280
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
