tbh I’m getting frustrated hearing “everyone does this” from #cybersecurity engineers at high-growth tech companies when I talk about modern security / #resilience stuff.
but then the “mature corp” majority often haven’t even heard of some of the basic concepts/practices, let alone are trying to adopt them…
it’s why I often leverage the “two Americas” analogy to describe the state of cybersecurity today. These things really aren’t “obvious” to many and pretending they are widens the gap.