cautionary tales from real world failures for managing security in the cyber world
Any field of endeavor benefits from a body of knowledge of failures that provide guidance on what to avoid. As a relatively young discipline whose failures can often be handled privately, information security professionals do not have access to the volume of well documented failures for analysis that more mature professions such as mechanical and civil engineering rely on. This paper examines catastrophic failures from the physical world and provides "lessons learned" that can be applied in managing an information systems security program.
failure civil engineering catastrophic failure lessons learned bridges