What is the "golden triangle" of information security?
Technik, Prozesse, Mitarbeiter — technology you buy and configure, processes you define and control, people you sensitize and educate.
The three corners and their verbs:
| Corner | What you do with it |
|---|---|
| Technik (technology) | kaufen, konfigurieren — buy and configure |
| Prozesse (processes) | definieren, kontrollieren — define and control |
| Mitarbeiter (people) | sensibilisieren, ausbilden — sensitize and educate |
The verbs are the message: each corner needs a fundamentally different management approach. You can purchase a firewall, but you cannot purchase awareness — people require continuous sensitization and education, not one-time procurement.
A triangle also means: the weakest corner defines your security. World-class technology with untrained people = the Signal-Leak pattern; trained people without defined processes improvise inconsistently.
Tip: Equivalent to the classic "People, Process, Technology" (PPT) triad — and the same idea as the IKT Minimalstandard's defence-in-depth including "Das Element Mensch" as its own layer.