Amount Quote by Jim Hurley
“There's what I'll call best practices and then there's reality. Based on our research over the past two to three years, there are significant differences in performance results that companies are experiencing with their security programs. There are some common things that are done very well among the best-class enterprises suffering the least amount of breaches and damages. But even having said that, there's probably no way to defeat a serious security threat today and it wouldn't matter what the tool is. The only way to do that would be to unplug the computers.”
About This Quote
Source Speech: Security Conference Presentation, 2023
Best practices differ from real‑world outcomes; top enterprises excel, but no tool can fully stop serious threats.
In simple terms: Best practices help, but threats remain inevitable.
Key Takeaway
Focus on resilience, not just tools.
Themes
security
risk management
best practices
realities
Mood
cautious
pragmatic
Type
advisory
analytical
When to use this quote
- enterprise security planning
- incident response drills
- budget allocation
- vendor selection
Key Concepts
risk mitigation
organizational resilience
threat landscape
Questions to Reflect On
- How can organizations balance best practices with realistic threat expectations?
- What non‑technical measures can reduce breach impact?
A Different Perspective
Even with strong practices, sophisticated attacks can still succeed.
