The Security Brutalist's Path
Twenty-One Precepts for the Solitary Defender
1.
Accept the threat as your constant companion.
2.
Do not seek pleasure in the theater of compliance.
3.
Do not depend upon a partial feeling of security.
4.
Think lightly of your defenses, deeply of your adversaries.
5.
Be detached from desire for elegant solutions.
6.
Do not regret what you cannot protect.
7.
Never be jealous of another's security budget.
8.
Do not let yourself be saddened by complexity.
9.
Do not seek to possess shiny new tools.
10.
Do not act following customary beliefs about frameworks.
11.
Do not collect policies without purpose.
12.
Do not pursue the taste of good dashboards.
13.
Never be driven by the fear of audit findings.
14.
Do not seek to have everything under control.
15.
Do not regret the brutal truth of your posture.
16.
Never stray from the path of effective defense.
17.
Do not cloud your mind with unnecessary abstractions.
18.
Never slacken in your practice of threat modeling.
19.
Accept the reality of limited resources.
20.
Perceive that which cannot be seen in the logs.
21.
Become the control that protects what matters.