Security Theater: A Dialogue in Late Capitalism Characters: The Architect — professionally
Security Theater: A Dialogue in Late Capitalism
Characters:
The Architect - professionally opaque, morally elastic
The GRC Officer - siren as conscience, clipboard as scripture
GRC: Woo woo. State your controls.
Architect: Controls don’t exist in isolation.
They emerge under observation. Like particles. Or ethics.
GRC: This says “zero trust.”
Architect: Zero trust in systems. Absolute faith in process.
GRC: You’ve mapped risk to color.
Architect: Humans understand danger chromatically.
GRC: And the adversary?
Architect: A rounding error with a hoodie.
(A red team report dies quietly in a shared drive.)
GRC: Woo woo. These metrics are… optimistic.
Architect: Metrics are mood boards for executives.
They regulate anxiety, not behavior.
GRC: You’re avoiding the question.
Architect: I’m containing it.
(Silence. This is the real perimeter.)
GRC: What happens when this fails?
Architect: We call it an “unforeseen convergence of factors”
and promote someone adjacent to it.
(The siren hesitates. Bureaucracy is self-aware now.)
GRC: So this is all just performance?
Architect: Performance is how institutions metabolize fear.
Control is optional.
GRC: And security?
Architect: Security is the promise that no one will be blamed personally.
(The attacker leaves through an OAuth token.)
Narrator:
Security theater is not a bug.
It’s governance expressing itself honestly.
A system optimized not to prevent harm,
but to distribute it safely across org charts and postmortems.
We don’t secure systems.
We secure narratives.
And as long as the story survives the breach,
the play will continue.
Standing ovation.
Threat intelligence every morning — new victims, new groups, what matters, in plain English. Free, with receipts.
Subscribe to the Daily →
Scott Gardner ·