Competence Quote by Stephen Northcutt
““Fewer than one in twenty security professionals has the core competence and the foundation knowledge to take a system all the way from a completely unknown state of security through mapping, vulnerability testing, password cracking, modem testing, vulnerability patching, firewall tuning, instrumentation, virus detection at multiple entry points, and even through back-ups and configuration management.””
About This Quote
Source Speech: Security Conference Keynote, 2005
Most security staff lack the full skill set to manage a system from unknown to fully protected, covering testing, patching, tuning, detection, and backups.
In simple terms: Security pros often miss end‑to‑end expertise.
Key Takeaway
Develop broader, integrated security competence.
Themes
security
competence
systems
risk
training
Mood
concerned
determined
Type
practical
educational
When to use this quote
- IT audit
- penetration testing
- network administration
- security operations
- disaster recovery
Key Concepts
vulnerability management
defense in depth
incident response
Questions to Reflect On
- How can organizations prioritize skill development?
- What training models best build holistic security expertise?
A Different Perspective
Limited resources and time make mastering every area difficult.
![“A nominee [to Supreme Court] must possess the competence, character and temperament to serve on the bench.” quote by Herb Kohl](https://sms4smile.com/quotes/img-quotes/51a/herb-kohl-25520_benches_a-nominee-to-supreme-court-must-possess_40021.jpg)
