There are important lessons to be learned from a crisis, even the ones that are more fiction than fact
"I've heard the statement 'society doesn't deal with problems until they become a crisis' many times. Unfortunately, this is often the case in information security, but it doesn't need to be this way. As security practitioners, we can't fix the ills of society. We can, however, learn how to distinguish a real security crisis from a manufactured one. Furthermore, from each crisis (real or manufactured) that we go through, we can learn how to avert them all together.
In this spirit, I offer 20 questions to ask during a real or manufactured security crisis..."
Read More ...