[kelnos]

I agree that many shops don't work this way, but they absolutely should. Anyone not developing a good defense-in-depth strategy, and just assuming that their edge firewalls will take care of them... well, they're one step away from a break-in and a data breach.

Our industry needs to do better, and not brush off good security as "glossy marketing talk".

[notyourday]

The first step towards fixing a problem is to admit that most of our "best practices" are marketing talk. We do not actually do it.