Originally posted here by Cyberruk


Having stated the above, it just feels to me that defense takes more work - why because as previously stated throughout this thread, defense it more a guessing game, the attack can be better planned. With defense, one needs to plan for every contigency that can be imagined.
I disagree. It is impossible to plan for every contingency that can be imagined. A defender can only afford (or rather he will only and just barely have the resources for, and maybe not even then) to deal with the most likely contingencies.

You could say the real skill is determining the most likely risks (risk analysis), persuading management to cough up the dough (mucho persuasion) and then implementing an optimal solution (money, time, people and effectiveness wise) before crossing one's fingers, sticking one's head between one's legs and hoping to h3ll you don't have to ki55 your a55 g00dby3!!!