Deming’s Seven Deadly Diseases applied to Information Security

Riskanalys.is has an excellent piece on the seven deadly diseases and how to convert them to information security:

As we look at the father of quality management and see if he’s got any relevance to what we’re doing (after all, security could be said to be a key aspect of IT Quality of Service), we come across what Deming calls the Seven Deadly Diseases. These are things that cause business to perform poorly. I’ve been thinking about analogues for us as I’ve read them, and some of my comparisons might be a stretch of interpretation, but I think these are not unimportant for us to meditate on a little.

Read more.