Stone Walls and Firewalls

The tools change but the mistakes never.

A fort is lost to an enemy everyone watched arrive for months. An army is routed because no one rehearsed the retreat. A commander holds his enemy's entire battle plan in his hand and still moves too slowly to use it. These are stories from the American Civil War. They are also, with the ridgelines changed for server rooms, the story of many latest security incidents.

In thirty-six short chapters, each opening on a real battlefield and closing in a modern security operations center, this book makes an uncomfortable argument: the failures that decide cybersecurity today are not technical, and they are not new. They are the same handful of human and organizational mistakes that broke armies in 1862. Trusting the wrong person. Seeing the threat too late. Losing the chain of command. Staking everything on one line. Ignoring the logistics and the retreat plan. Freezing when the moment demanded a decision. Six ways of losing a war, older than the technology by a century.

From Fort Sumter to Appomattox, from a spy's Washington parlor to a tunnel dug under Petersburg, you will meet the people who got it wrong and the rare few who got it right, and you will recognize every one of them from your own work.

Inside:

• Why the breach everyone sees coming is the one that still lands, and what Fort Sumter teaches about the gap between knowing and acting.
• How a post-incident review that hunts for a name instead of a cause guarantees the next incident.
• Why your strongest control tells the attacker exactly where not to go.
• What "informed risk acceptance" actually looks like, and how to tell it apart from bravado.
• How to end an incident so it stays ended, instead of scheduling the sequel.

You do not need to know the history to follow it. You do not need to run a security program to recognize the mistakes, though if you do, some chapters will read less like history than you would wish.

Written by a penetration tester and incident responder with twenty years in the field, this is a book about why organizations lose, told through the war that keeps teaching the lesson. It ends with a question the reader is left to answer alone: which chapter are you?