Kevin Mitnick Quotes

For most companies, they don't want to ever talk about security unless it's an absolute emergency and they've had a breach. And I think that's a mistake.

We're going to become the number one security company.

The reality is that there are simply not enough skilled humans available to properly plan, manage, integrate, and optimize security devices, strategies, and protocols.

Any security issues, you have to be very hands on to really understand what's the exact problem, and then take quick action.

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

Businesses should absolutely set aside funding in their budgets for security consultants. Unless there is an expert on staff, and there usually is not, it needs to be outsourced.

A lot of companies are clueless, because they spend most or all of their security budget on high-tech security like fire walls and biometric authentication - which are important and needed - but then they don't train their people.

As long as an attacker creates opportunities, everything is fine.

Being a CISO is a tough job. I have the end responsibility for the personal information of over a billion people.

Looking back, there hasn't been a single day in WhatsApp's 10 year journey when this service was secure.

It's certainly easier to implement bad security and make it illegal for anyone to notice than it is to implement good security.

If you are a big company, a big website, and lots of users come to your website, you will have attacks, and you have to deal with that. It just cannot be a reason to take actions to exit certain markets.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

Well, the security business has been growing. I think security is one of those areas where it's to some degree not linear but maybe exponential growth.

Nothing is absolute in security.

It's simply unrealistic to depend on secrecy for security in computer software. You may be able to keep the exact workings of the program out of general circulation, but can you prevent the code from being reverse-engineered by serious opponents? Probably not. The secret to strong security: less reliance on secrets.

Security is always going to be a cat and mouse game because there'll be people out there that are hunting for the zero day award, you have people that don't have configuration management, don't have vulnerability management, don't have patch management.

What we are seeing now is customers shifting their attention from security products like firewalls and intrusion sensors, to the policies that need to be in place, and the technologies that help them enforce policy compliance.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

Our security strategies have not yet caught up with the risks we are facing. The globalization that has swept away the barriers to the movement of goods, ideas and people has also swept with it barriers that confined and localized security threats.

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards -- and even then I have my doubts.

Security today is important, but 90 percent of security involves other co functions of government.

There is no secure data center in the world; they have all been broken into. We can help you prepare for it and minimize the damage when it does occur.

Part of our obligation is to ensure that policymakers are provided with the fullest possible picture of any matters that might affect national security.

Small businesses are the backbone of the American economy and employ almost half of the working population. Yet because of their size, they rarely have access to the same information security resources as large firms.