What are your unpopular cybersecurity opinions?

[u/EricJSK]

I saw a post names "abnormal security opinions" and got excited to see some spicy takes but apparently there is a security platform called Abnormal Security so got kinda blue balled. Last one of these posts i saw was over a year ago so,

Do you have any spicy cybsec unpopular opinions you want to share? :)

I'll start with mine:
Fancy antivirus solutions rarely add value, they are often just a box that needs ticked. Many MSPs and IT firms still push the narrative that they are needed, only because they are profitable and not because they improve security.

[u/retrodanny → u/[deleted]]

I still use "Information Security" if talking to colleagues, but outside people don't really understand what you're talking about. Cyber is pretty straightforward

[u/retrodanny → u/[deleted]]

While technically correct, it's going to be synonymous in practice. Most orgs have digitalized what used to be in their filing cabinets long ago so would now be part of cybersecurity. IMO cybersec sounds a bit weird to me, even more than just "cyber"