There are people in the InfoSec industry who are held up as idols & heroes within the community who have, under their watch, presided over MULTIPLE mega breaches & privacy debacles yet continue to be given air time & lauded for their expertise & leadership FOR FAILURE AT SCALE

Is the idea if they talk a good game about ideal states of security and privacy whilst providing an affable yet academic, but likewise “controversial” stance on execution that they add value because they’ve f’d up & supposedly know how to not repeat? Data suggests otherwise