I got into information security backward. I come from a physical security and operational background—think warzones and military base access control policies, and you start to understand how I’ve spent a decent amount of my time. The thing about physical security, though, is it’s fairly boring (until it’s not, and then it’s really not).