Change Quote by Wietse Venema
“I don't expect an overnight change of all desktops to what the US Military used to call B3 level security. And even that would not stop users from shooting themselves into the foot.”
About This Quote
Source Speech: Security Conference Talk, 2005
Security improvements are gradual; expecting instant, perfect protection is unrealistic, and users often cause self‑inflicted issues.
In simple terms: Security takes time; users can still make mistakes.
Key Takeaway
Implement incremental security and educate users.
Themes
security
risk management
user behavior
incremental improvement
Mood
cautious
realistic
Type
advisory
practical
When to use this quote
- IT policy rollout
- software updates
- user training
- incident response
Key Concepts
defense in depth
human error
security hygiene
Questions to Reflect On
- How can you balance strict security with user convenience?
- What training reduces self‑inflicted security errors?
A Different Perspective
Even strong policies fail if users bypass or misuse them.
