Australian security and the cult of mediocrity
This article is generalised rubbish. That&#x27;s not to say there&#x27;s a shortage of badly managed, over spending IT projects in Australia (either public or private) but I doubt it&#x27;s worse here than UK, US, Denmark or where ever else.<p>And to blame it on &quot;Programmers&quot; or siloed universities is about the laziest piece of analysis I&#x27;ve read in anything (including Trump tweets) for ages.<p>There are real issues in IT generally is Aus, eg large orgs outsourcing all their dev work to large and small SI&#x27;s, no in house capabilities for anything other than limited governance, a reluctance to take on and train grads and a million other things.<p>Security is definitely something that needs to change. In my experience IT security has often been seen as a infrastructure job rather than a holistic practice that covers the life cycle of systems, but the first time I worked with a security dev team was a government org, which was great. They were much less about the firewalls, and much more focussed on good security practices, the poor application of which by devs were often demonstrated at fortnightly showcases where they would demo exploits in real time. Especially awesome was the time they dropped the entire &quot;user&quot; database table with some magic Hibernate exploit.