Zero Security Theatre
Patterns and anti-patterns
Patterns are practices that help when tested. Anti-patterns are common, usually well-intentioned practices that create paperwork without improving the result.
Patterns
Replace remembered behaviour with system behaviour
For each thing staff are asked to remember, look for an arrangement that makes the unsafe action impossible, expensive, or automatically reversible. Keep training for the judgment that genuinely cannot be designed out.
