I was looking at our Lego models of industrial premises. We use them for cybersecurity risk workshops. They remind me of a huge problem in much of the field: the missing human. Yes, zero day vulnerabilities and code-level problems are important, but most security and privacy problems turn out to have human involvement. Sociotechnical security, as it is called, is essential if we are to achieve effective results.
The mini-figures are the most important part of the story!
- Charles