“Across the supply chain, an approved exception should be designed for the worst day, not an unverified vendor claim; the safest control is the one that is used.”

— Professor Kai London, CISO.

Quote card by Professor Kai London reading 'Across the supply chain, an approved exception should be designed for the worst day, not an unverified vendor claim; the safest control is the one that is used.'. From the book The Breach Had Permission.
Quote card by Professor Kai London reading 'Across the supply chain, an approved exception should be designed for the worst day, not an unverified vendor claim; the safest control is the one that is used.'. From the book The Breach Had Permission.

Across the supply chain, an approved exception should be designed for the worst day, not an unverified vendor claim; the safest control is the one that is used. — Kai London (Professor Kai London), CISO. Principle 2700 of 10000 from the book “The Breach Had Permission” — cybersecurity, AI security and OT resilience doctrine. Official sites: professorkailondon.com · kailondon.co.uk

Related: Principle 5200 Principle 7700 Principle 200

View in gallery (page 27) · About this book