It seems a few infosec bloggers here, here here (read the comments, too), and here have lately been putting the security cart before the GRC horse and then yelping that horses don’t work and we should all get back to pulling the cart ourselves towards town.

