“We can’t fix software security in isolation without fixing the underlying software development practices. And that in turn depends on many things but a powerful factor is the underlying management systems in place. Changing those management systems can’t happen without the existing leaders changing their minds, unlearning and relearning new ways of working.”
https://tldrsec.com/p/systems-thinking-for-cybersecurity-professionals
Mastodon Source 🐘
Related excellent post: https://kellyshortridge.com/blog/posts/cybersecurity-isnt-special/