"Security is a process, not a product" Bruce Schneier May 2000

Philosophy - Security Evolution was formed in recognition of the above famous quote that has helped the security community rediscover its roots -  basing security organizations on people and not just technology.  

Security Evolution believes that security is about:

• Organizations - Who is responsible

• Policy, Procedures - How is security managed

• Technology - What tools are used

Security Evolution believes that building a security organization based on these three components is an evolving process of managing people and the tools they use. Security Evolution believes the technology-only approach is quickly being replaced, and we are the strategic leaders in that movement. To that end note that we do not sell product, so the only bias we carry to a customer's site is a total focus on customer needs and not product quotas.

Mission: Security Evolution provides world-class security services and training, supporting our clients build security programs for their organizations.

History: Security Evolution was founded by its CEO Michael Endrizzi. Michael's tenure in information security began in 1986 developing classified highly secured systems for the US Navy, CIA and NSA. Michael spent many years working the technology side of information security both for the military and commercial enterprises. In the late 90's Michael concluded that technology was only a minor piece of the information security puzzle and refocused his attention to the policy and organizational aspects of security. Thus Security Evolution was born in the realization that security is not something you install and turn on, but rather an on-going evolution as organizations mature and embrace the processes involved with implementing a information security program.