John T. Chambers Quotes

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

Well, the security business has been growing. I think security is one of those areas where it's to some degree not linear but maybe exponential growth.

The reality is that there are simply not enough skilled humans available to properly plan, manage, integrate, and optimize security devices, strategies, and protocols.

For most companies, they don't want to ever talk about security unless it's an absolute emergency and they've had a breach. And I think that's a mistake.

We have problems with our physical security, operational security through to management.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

I won't be satisfied until I've put the entire security industry out of work.

Businesses should absolutely set aside funding in their budgets for security consultants. Unless there is an expert on staff, and there usually is not, it needs to be outsourced.

We think the managed security services opportunity is enormous and so we have been an active participant and probably the largest firm in this space outside of an IBM or EDS, which does large outsourcing contracts.

A lot of companies are clueless, because they spend most or all of their security budget on high-tech security like fire walls and biometric authentication - which are important and needed - but then they don't train their people.

I'm not the geek in the family: I'm the organizer. But what I do know is that we have a very terrific team of consultants, former federal cybersecurity experts who are working with us to make sure we have a very safe system.

Being a CISO is a tough job. I have the end responsibility for the personal information of over a billion people.

I generally use 'threat intelligence' when I'm talking about a product packaged and sold by a dedicated commercial entity and 'information sharing' as something that happens between security teams at trusted parties without renumeration.

The threat landscape continues to expand, while cyber threats are continually becoming more sophisticated. This has convinced organizations to expand their security policies and deploy more security solutions.

It's certainly easier to implement bad security and make it illegal for anyone to notice than it is to implement good security.

The next thing is: we can make IBM even better. We brought IBM back but we're gunning for leadership.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

The user's going to pick dancing pigs over security every time.

McAfee's No. 1 strength is that they have a fantastic R&D team, engineering, as well as research at the core of security: database threat management.

I characterize myself as a retired hacker. I'm applying what I know to improve security at companies.

What we are seeing now is customers shifting their attention from security products like firewalls and intrusion sensors, to the policies that need to be in place, and the technologies that help them enforce policy compliance.

Small businesses are the backbone of the American economy and employ almost half of the working population. Yet because of their size, they rarely have access to the same information security resources as large firms.

Security is an endless race - one that you can lead but never decisively win. Yesterday's best defenses cannot fend off the attacks of today or tomorrow.

I'm also the chairman of the board of Symantec, which is the world's largest cybersecurity - software cybersecurity company.