The folks at Gartner recently published a research note authored by Andrew Lerner and Jeremy D’Hoinne that highlights their dirty dozen worst network security practices for 2015. This is based on their interviews with over 3000 customers. I would give you the link to the report but it is not publicly available. However if you are a Gartner customer (and most of you probably are for good or bad) you can grab a copy of the report.
I have prepared by “Shimmy view” of these worst practices. I think many of them are right on. Have a look at the slides and let me know what do you think. Did they leave any out or put ones in that don’t belong there? One mans security worst practices is another’s best.
[seoslides embed_id=”194407f17459″ script_src=”https://devopsy.kinsta.cloud/embed-script/gartners-netsec-dirty-dozen-worst-practices/gartners-dirty-dozen/” overview_src=”https://devopsy.kinsta.cloud/slides/gartners-netsec-dirty-dozen-worst-practices/” site_src=”https://devopsy.kinsta.cloud” site_title=”devopsy.kinsta.cloud” title=”Gartner’s NetSec Dirty Dozen Worst Practices” /]
Alan Shimel is founder, CEO and editor-in-chief of Techstrong Group, a Futurum company, and a member of Futurum's executive leadership team. A technology entrepreneur, media executive and industry commentator, Shimel has spent more than three decades building businesses, communities and media platforms serving enterprise technology professionals, including co-founding StillSecure, a network security company, and the DevOps Institute, a DevOps certification and training body. At Techstrong, he leads a portfolio of media brands including devopsy.kinsta.cloud, Security Boulevard, Cloud Native Now, Techstrong AI, Techstrong IT, Digital CxO, Platform Engineering, Techstrong Semi and Techstrong TV, along with a growing portfolio of events, educational programs and digital communities. With more than 25 years of experience in cybersecurity, Shimel is a familiar voice in the space and was an early advocate of the DevOps movement, helping bring DevOps practices into mainstream enterprise technology. His work today spans cybersecurity, DevOps, cloud-native technologies, artificial intelligence, semiconductors and digital transformation, and he hosts popular programs including Techstrong Gang, Shimmy Says and Still Cyber, After All These Years. He holds a Bachelor of Arts in Government and Politics from St. John's University and a Juris Doctor from New York Law School.