ResearchIPOngoing2026
The dangers of security theatre
Security programs are usually described by what they have: purchased tools, signed policies, closed findings, and certificates. That says almost nothing about what would happen if a capable attacker tried something today. This pillar tests the controls and measures what happens.
The full record
This work keeps its detail in the IP register, so there is one copy of the facts rather than two.