Bad security days happen, when the paranoia meter pegs and there is no substantiating facts behind it, some days it’s bad to be a paid paranoiac.
The day might start out normally, but by the end of the day every paranoia meter in the building is going off. It’s like everyone knows there is going to be a major layoff, or that some thing got over looked, or mistakes were made but we don’t know what the mistakes were. We feel like we are being watched, people start behaving differently, your boss shows up in the office more than usual to see how its going or what you are up to. Things like this happen all day long.
Yet everything is quiet, no early warning system is going off, no one is telling you to pack your office, all the web sites and systems still belong to you.
Sometimes, everything that can go wrong isn’t really going wrong. It’s just that gut instinct that you develop over time to deal with information security events, and some times it is just going to trigger regardless.
Staring at the monitors, going through system logs, going through your IDS logs, or your security management systems isn’t going to get you the answer, there is no answer, there is still nothing going wrong.
As your paranoia goes, you suddenly notice that everyone is reacting to the sudden increase in corporate fear, uncertainty and doubt.
Dealing in an “at will” work environment does not help, that nagging voice in the back of your head that tells you something is going wrong is still letting you know that something is going wrong. Everything looks suspicious at this point. Even your boss dropping off a free slice of pizza coupon (the boss never did that before, something has to be up).
Time to sit back, maybe take some time away from the day, maybe go work in the cafeteria if you can, do what you need to do to get away from the office. Paranoia is infectious, and people will see your altered behaviors. Then they will think that you are on some big case, or something major is going on, and then the rumors start flowing that something is happening.
That is where Daniel Robin and Associates “Making Workplaces Work Better” can come in handy. In their Dysfirmations section here, they have a list of things that can make even the professional paid paranoiac happy. I edited these down to those that most closely fit the professional paranoiacs view point on life.
“I have the power to channel my imagination into ever-soaring levels of suspicion and paranoia.
In some cultures what I do would be considered normal.
I am at one with my duality.
The complete lack of evidence is the surest sign that the conspiracy is working.” (Daniel Robin and Associates).
Add to 
Bookmark Murdok:
Dan Morrill has been in the information security field for 18 years, both
civilian and military, and is currently working on his Doctor of Management.
Dan shares his insights on the important security issues of today through
his blog, Managing
Intellectual Property & IT Security, and is an active participant in the
ITtoolbox blogging community.
