Layer 8

Security is fundamentally about people, and everything we know about people is relevant to security. -- B. Schneier

Defending policy makers.

Alex got me going with his rant about the extremely irresponsible Wall Street Journal article, and other ignorant commenters haven’t made it any calmer, so I thought I’d toss a few things out there for anyone who’s tempted to complain about a security policy.

I actually felt a lot of sympathy for Kip Hawley, who is currently being raked over the coals (very expertly, I might add) by Bruce Schneier over on his blog.  Kip said:

Imagine for a moment that TSA people are somewhat bright, and motivated to protect the public with the least intrusion into their lives, not to mention travel themselves.

First thing, imagine for a moment that policy makers are well-intentioned, mostly intelligent, and have

good reasons that you don’t know about

for the policies they create.

The loudest and stupidest criticisms of security policies come from people who have never been in a position of responsibility for security—especially when the stakes are high. 

People who give their bosses a hard time often have no idea how annoying it would be to them to be on the receiving end of the same grief.  If you’re a learning person at all, you learn a lot in your first supervisory position.  It’s a lot like the one-way mirror of parenting:  when you’re on one side, you see only yourself; when you’re finally on the other side, you see both sides.

As someone who has had to sit in on policy meetings, keep ugly secrets, and write up policies that met management and legal objectives without going overboard, I can tell you that there are almost always stories behind a new policy that you know nothing about.  A new or changed policy is usually brought out in reaction to an actual event, and the reason you don’t hear about it is that litigation is still pending, law enforcement asked us not to talk about it while they’re still investigating, or it’s an HR issue and none of your damned business.  If two employees were caught cybering each other on IM and one of them filed a harassment complaint, you’ll see an addition to the sexual harassment policy of your organization that happens to mention “email and instant messaging.“  You won’t hear the story unless gossip gets around; management won’t tell anyone who doesn’t have a need to know. 

With military or homeland security, the iceberg goes even deeper.  You can complain about the secrecy, but only to a point:  there are plenty of good reasons why some things are classified, and you won’t understand this unless you walk a mile in the shoes of the people who are really trying to tackle this. 

When I try to imagine what Kip Hawley’s organization is trying to prevent, and what they’re not allowed to reveal, I can believe that he’s representing himself creditably in the firing line.  When you’re in security, you’re always walking a tightrope, trying to keep public opinion on your side while at the same time protecting things they don’t know or care about, and enforcing rules broken by self-centered idiots or actual malevolent threats.  If you succeed, nobody thanks you; if you fail, everyone wants your head. 

So let’s cut security officers of the world some slack, ‘k?  Assume that they’re just like you—because they are—and that they are both trying to do a good job and know more about the details of that job than you do.  If you have been in their place, then you can criticize them.  If you don’t think they’re doing a good job, then get out there and start doing it yourself.  Make a difference.

Otherwise—and I mean this most sincerely—shut your pie-hole.


Posted by shrdlu on Wednesday, August 01, 2007
(3) CommentsPermalink blogmarks Favicon del.icio.us Favicon Digg Favicon Fark Favicon Furl Favicon Google Bookmarks Favicon StumbleUpon Favicon Technorati Favicon TailRank Favicon

Comments

rybolov United States on 08/01  at  04:13 PM:

You mean people with access to classified data know more about the threat than people who feel harassed by being a suspected terrorist simply by the purchase of an airline ticket?

And hear all along I thought you were one of the rabid civil libertarians, defenders of encryption and that wonderful privacy policy known as “Nun Yo”.  =)

The way I see it, for every jack-booted thug, you need a tree-sitting radical in dreads, they counter each other out in some weird karmic way.  Wackos balance out other wackos, that sort of thing—a yin for the yang and you always become what you hate, like the anti-fascist fascists that I used to know in Oregon.

TSA and their job are not any different, because security is a tradeoff.


Completely unrelated:  You’ve been blog-slacking.  I’m probably to blame in some convoluted way, like there’s only so much room in the blagosphere for one of us to be dominant at any given time.  How do you expect me to kibbutz if you’re not willing to collude post-wise with me?

shrdlu United States on 08/01  at  04:30 PM:

LOL!  Dude, you’ll probably spend half your time thinking I’m on your side and the other half thinking that I’m not.  Chrissie Hynde wrote “Middle of the Road” for me. wink

You’re right about needing that karmic balance.  For the most part, that’s what keeps us in the middle of the road and from getting too extreme.

Moreover, you do need people questioning you—but with some intelligence and knowledge behind it.  If you can argue from a position of knowledge that something doesn’t need to be classified, for example, it can do a lot of good; you can be a real “check and balance” on the ones doing the decision-making.  But if you’re just shooting off your mouth because you, personally, were inconvenienced, then I have a nice fencepost for you to sit on.  And a hankie, for afterwards.

Re: slacking—I’m not likely to disagree with you, so unless you post something that I can violently agree with, you probably won’t incite me to post much.  wink  I’ve been swamped with work, and most of it I can’t blog about, dammit.  Today I’m taking a mental health day (can you tell?).

Rob Newby Spain on 08/02  at  03:58 PM:

Ooh, I’ve been in their place. Can I criticise them?

Before you criticise a man you should always walk a mile in his shoes.
That way, when you criticise him, you’ll be a mile away, and have his shoes.

I’ll shut my pie-hole.

Page 1 of 1 pages

Add a comment

Name:

Email:

Location:

URL:

Smileys

Remember my personal information

Notify me of follow-up comments?

Submit the word you see below: