security theater

expression

securitygovernance & risk

Bruce Schneier's term for measures that perform protection visibly while providing little of it.

The value of the term is the test it implies: does this control change an attacker's calculus, or an observer's feelings? Some theater is even defensible - visible deterrence has effects - but only if someone, somewhere, knows which category the measure is in.

Also known as: security theatre

All glossary entries