My previous RSA 2012 call for action, security IQ, compared information security to heavily regulated and competitive industries such as the drugs and aviation industries, calling for a standard qualification mechanism, governmental or academic.
However, this may not be the only model the information security should take to ensure we are all better prepared for future security challenges. An alternative approach is to deviate to some degree from the commercially centric nature of the industry and work more closely together.
The question is what should be the model? A Leviathan model may provide the best security but is too utopian for an area which is mostly commercially driven....
