Industry


Ads by TechWords

See your link here


Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Michael R. Farnum's picture
Michael R. Farnum

Hitting the Security Nerve

How do you define FUD?

A security product sales person walks into your business for a meeting.  You sit down at the meeting room table, and he proceeds to give you statistics from a magazine article, passes some quotes from an expert, and a tells you a couple of horror stories that are completely generalized.

And couple of hours later you have another meeting with another security product sales person.  This one gives you some "real world" examples of attacks that happened to some of his clients (he doesn't share specifics about the clients), doesn't quote any stats unless they are very relevant, and tells you some excerpts from a lunch meeting he had with one of his security assessment consultants yesterday.

So here's the question.  Which one of these is FUD?  Or are they both FUD?  Though I am usually a pretty "black-and-white" kinda guy, I think this really comes down to each individual's preferences and ideas.  I would generally define FUD as the first sales tactic because it sounds like some guy gathered a bunch of stats and regurgitated them without really knowing what he was talking about.  The second sales person sounds more genuine and seems to know the security business pretty well.  Of course, the second guy could just be slick and might be lying through his teeth.  In that case, both are FUD, and the second FUD sales tactic is more effective because it was thought out and was delivered in a better package.

So it really comes down to "buyer beware" in every case.  Basically, you have to approach any sales meeting with a healthy dose of paranoia and skepticism.  Listen for signs of dishonesty or technical bull crap.  Don't be dazzled by shiny new security stuff.  I have made that mistake, and it will get you into trouble.  It sucks having to think in this manner, but that is just the way it is if you want to make healthy buying decisions.

And one more point: when you do find that product or service that you need, watch yourself when you are preparing your purchase justification for your management.  Are you using FUD?  Believe me, it is easy to fall into the trap.

What People Are Saying

To FUD or not to FUD, that is the question

Giving stats is one thing. Defining the problem by telling true tales is another.
The way to effectively sell a product or service is to find what the customer wants and provide it. Salesmen (and women) tell the stories to see if it resonates with the potential client. If it does, then there's a need to fill.

In security, we are all salespeople and we need to learn their tactics to be successful. I recommend Zig Zigler and Robert Cialdini's books. They've helped me a lot.

FUDs are for ISRs

When I think about FUD, I usually associate it to an Inside Sales Rep making cold calls trying to generate interest. Or magazine ads. By the time a sales person walks in for a mtg with you, I would guess that you already have a belief that there is a problem and that you'd like to solve it. There should be no need for FUD at that point. And if they use stats and stories, it's to set the stage and the context for their product.

Try giving a sales presentation about a security solution without discussing the scenarios that it will address -- doesn't make sense. Go easy on us vendors ;) -- some of us are trying to be good, but it's a wide and diverse audience who all understand the problem sets very differently. We sometimes need to discuss stats and stories to effectively tell our story.

Matt, Those are good points.

Matt,

Those are good points. Thanks for that side of it.

Michael R. Farnum

Better to be despised for too anxious apprehensions than ruined by too confident a security.
Edmund Burke (1729 - 1797)