Validian Corp fka VLDI

[Surwin]

I agree, but Rafael back in November had been testing the software for over 9 months. He too saw the difficulty with introducing radically innovate software.

Here is his quote to me about this topic:

To your observations about legacy software and fears of trying something different and cutting edge.


This certainly plays a role, I think to a large degree. Human nature in 80% of the cases is to stay with the group. In fact, if you read "The Survivors Club", the basic thesis Ben Sherwood brings is that there is a 10 / 80 / 10 ratio, where 80% of the people wait, act, and are all affected, as a group.

So, if the majority of your peers maintain a specific security posture, with a set of tools, and deployments, that's deemed an "industry best practice", why not just do the same? Especially when faced with the option of going against the established norm.

The security psyche is to be critical and believe that something is too good to be true.

Also on the topic of marketing:

So, good old exposure among a peer group that can see value in any product is priceless. You can have the best product in the world, but if nobody knows about it ...

Thus, why I recommended RSA. Because the decision makers with control of the purse strings are all there, and they are also nerds, who can critically evaluate need and value. There's no hard sell that needs to be made, everyone expects there to be some level of sales, but you go looking for it. So, the atmosphere is conducive to just asking questions. For both good and bad, RSA is extremely busy, and speaking / demo spots fill up almost a year in advance. But, we go every year, and even done some pretty good guerrilla marketing for our retail forensic software at party's we've hosted. Same in Vegas.