Size doesn't matter

Despite being the IT Security Manager with Grant Thornton’s Risk Management Services practice, John Dunne is actually quite an interesting bloke. He’s also quite good at what he does, which is why I was happy to receive a communication from him attempting to debunk the much propagated myth that the size of a company is directly proportional to the risk of attack. I guess you could call this the ‘size matters’ approach to security which suggests that large PLCs and multinationals suffer the most targeted and prolonged attacks, while at the smaller end of the business food chain security by obscurity comes into protective force. This is, as the more battle hardened of IT security professionals are aware, total bunkum.