General Laws of Cybersecurity

  • Treat everything like it’s vulnerable.
  • The smarter a thing gets the more vulnerable it becomes.
  • Assume people won’t follow the rules.
  • If you don’t need something, get rid of it.
  • Document everything and audit regularly.
  • Plan for failure.