Information security is not a matter of secure or not-secure. Throughout history, it has always been a matter of available resources and risk management.
Failing to consider security in terms of resources and risk leads to moments like this. The crushing fear that you're not doing enough, never doing enough, never sure enough...
It's a bottomless pit of anxiety. You can always add on more protections, more tools, and more layers. Your anxiety is never really soothed because you can never actually fully banish risk.
As long as you conceive of information security as deterministic or binary, you're going to struggle.
Failing to consider security in terms of resources and risk leads to moments like this. The crushing fear that you're not doing enough, never doing enough, never sure enough...
It's a bottomless pit of anxiety. You can always add on more protections, more tools, and more layers. Your anxiety is never really soothed because you can never actually fully banish risk.
As long as you conceive of information security as deterministic or binary, you're going to struggle.