yep, true fact...
we used to have snow every year (some decades ago), now we (some of us) are happy when it finally snows, to realize it's gone after a few hours...
The other half doesn't know how to drive a vehicle anymore at that time...

I would not match them, but more like extending the test cases with what is found in the requirements.
But tbh, a good fat/sat approach should already cover all your own security requirements.

True, security requirements should idd be set during design phase and verified. First on paper allowing you to catch low hanging fruit and tailor any testing protocol, second by performing technical tests.

*sigh* this has been a good security practice for several decades already (when I was still installing firewalls), so I find it a bit strange that this suddenly becomes a hot topic... are people forgetting the good stuff, what works, the basics?? Is everybody falling for buzz words instead?

well... I sure hope other tools would also be possible to be used within segmented networks without needing direct access to the internet to fetch updates...

nice :-) let me know when this plan is formalizing :-)

Or to BruCon

hi Stephen, missing you in CPH ;-)