Providing service to the networks for years, the VNS imploded the last to major elections. What happened? Now the story can be told. A must read article for system architects and project managers.

Lessons to keep in mind:

1. Test early: Stress-test your system at least six months before launch
2. Test heavy: Put it through at least 10 times as much activity as you really expect
3. Trick yourself: Establish a deadline at least two months in advance of the “real” deadline and make all project managers and vendors comply
4. Name one chief: Regardless how many partners, consultants and vendors are involved, give one person ultimate decision-making power
5. Don’t reinvent the wheel: Make good use of existing personnel and technology, where possible

This five-step process works for any security measure, past, present, or future:

1. What problem does it solve?
2. How well does it solve the problem?
3. What new problems does it add?
4. What are the economic and social costs?
5. Given the above, is it worth the costs?

When you start using it, you’d be surprised how ineffectual most security is these days. For example, only two of the airline security measures put in place since September 11 have any real value: reinforcing the cockpit door, and convincing passengers to fight back. Everything else falls somewhere between marginally improving security and a placebo.

Read the rest at in the Crypto-Gram newwsletter. via Cafe au Lait.