Breaking (TLDR)

Discovering risks

• We discover risks with Breaking.
  • Breaking is the whole world of offensive security work. (“Hacking”)

Breaking anti-patterns

• Breaking creates work for building.
  • Resourcing for breaking and building is a Explore / Exploit Tradeoff.
• Law of the Lever:
  • Breaking creates work.
  • Breaking can create more work than you can mitigate.
  • Incentives can worsen this this further.
• Violating the lever can create internal hostility and toil.