This blog is a journal of an information security professional.   This is not meant to be an advice blog, just a journal.   I picked the name forkliftupgrade because I think in many cases that is required with many of the approaches we use today in Information Security.   The use of compliance as a baseline or a scorecard is not longer the standard that Information Security holds itself to.