From: clubley@remove_me.eisner.decus.org-Earth.UFP   
      
   On 2026-02-06, gcalliet  wrote:   
   > Hello,   
   >   
   > I am doing investigation about security for "latecomers" VMS users (Vax,   
   > Alpha, Itanium on HP licence).   
   >   
   > It seems being a not-so-little number of users. And for them, to adapt   
   > to the fast cycles about security (SSH, SSL for example) is a challenge.   
   >   
   > I know the Process Software offer for that, able to work with everything   
   > on VMS. Are there other offers, methods, Open Source initiatives...?   
   >   
   > Every idea, information welcomed.   
   >   
      
   Security is a process and a mindset, not a tool.   
      
   Tools are required, but they cannot be used as a replacement for a   
   security-driven process and mindset.   
      
   For example, how do these sites handle security internally at the moment ?   
   Strong passwords, only allow encrypted communications on the local network,   
   auditing, disabling of old accounts, keeping up to date on patches, etc ?   
      
   That last one is a good example: you can't just install a tool and then   
   call it "job done". You have to continually keep things up to date.   
   For one specific example, it might be interesting to see if the patch   
   for my DCL CVE has been installed on these sites or that a suitable   
   workaround has been implemented.   
      
   To repeat: security is a process and a mindset, not a tool. Tools are   
   only a part of the overall process.   
      
   Simon.   
      
   --   
   Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP   
   Walking destinations on a map are further away than they appear.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)