Security Revolves Around People

Abstract

Trusted people—people who must be trusted in order for the system to function—are part of any security system. They are a critical element, perhaps the critical element, because they’re the most resilient part of the system, the most able to improvise, the best equipped to make on the-spot decisions, and the most skilled at detecting the presence of attackers. But of course human beings, when considered as components of a security system, are a double-edged sword. They can fall asleep, get distracted, and be tricked. They can turn against a security system. A good security system leverages the benefits of trusted people, while building countermeasures to prevent them from abusing that trust.