We knew many people who used to say: it won’t happen to us. And they turn away. Do you wonder why they do that?

Because security invades the area of personal insecurity. It’s the more human border of information technology, full of myths and fears. First myth; it’s easy to ensure information security: just raise impressive barriers, take defensive positions. Wrong: security is a complex issue, it must find the right balance between technological and organizational devices. It’s not perfect, it’s a juggling act. A penetration test that offers instant remedy is an aspirin: systems evolve only quickly, if you haven’t learned your lesson, you are ready for the next general defacing. Second myth: those who violate our systems are wizards who can run through walls. Wrong: they’re just people, very curious and insightful, but only people. It’s our fault, because sometimes we leave doors open. Third myth: to ensure information security we don’t need creativity. Wrong: you must empathize with the thief, prevent his moves in new situations every day, and to do this you need as much creativity as wisdom.
Above all there’s the fear that a failed security should be something to be ashamed of. Wrong again: it’s the only experience you can learn something good from. Anyone who thinks everything is ok is in for a big disappointment.