Zero Security Theatre

Patterns and anti-patterns

Patterns are practices that help when tested. Anti-patterns are common, usually well-intentioned practices that create paperwork without improving the result.

Patterns

  • Replace remembered behaviour with system behaviour

    For each thing staff are asked to remember, look for an arrangement that makes the unsafe action impossible, expensive, or automatically reversible. Keep training for the judgment that genuinely cannot be designed out.

    Under Human error without human blame