Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
CommentaryCommentary
Commentary
Commentary
CommentaryCommentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
It is because a more integrated world simply means more threats. Also we have been experiencing major breaches that touch consumers directly such as Target case.
In reply to: Re: if there's a silver lining...
That is one aspect of security we tend to get lost in my view. It does not really matter who needs to report where, it is actually everybody should be reporting to everyone by keeping everybody accountable on everything...
In reply to: Re: Compliance != Security
I agree with the article, we need to consider security as an investment. IT as a whole is always associated with the cost but without IT nothing can get done in today's world. The same for security, it may be way...
In reply to: Security as an Investment
In my opinion the ideal organization setup for a companies information security department would be setup this way. The CSO would report directly to the CEO and keep him well informed of the high level threats to the...
In reply to: Re: Compliance != Security
Good point, @Robert McDougal. So in our survey responses, I'm guessing the Org Chart 'checkbox' in this case might lead to Chief of risk / compliance.
In reply to: Re: Compliance != Security
I totally agree, @Robert. I found the comparison to epidemiology very original and apt with respect to cybersecurity. There has always been a lot of talk about proper security hygiene but using the public health model as...
In reply to: Re: Blueprint for fighting cyber infections
Not trying to put words in @chriscinfosec's mouth but in my experience sometimes regulations put executives into a check box mentallity. This means that they believe that if they do what the regulation says then they...
In reply to: Re: Compliance != Security
Not sure I get your point @chriscinfosec about the relevance (or irrelevance) of PCI-DSS and the reporting structure of the CSO. Can you elaborate?
In reply to: Re: Compliance != Security
Great Article! Our biggest problem in this fight is the uneducated user. To use a crude analogy, the user's we have today are by and large akin to the populace prior to germ theory. People don't understand proper digital...
In reply to: Re: Blueprint for fighting cyber infections
How has outdated compliance regimes like PCI DSS negatively impacted the security posture and readiness of organizations? The industry is starting to say "A LOT" -- witness the work that SANS has done for their 20...
In reply to: Compliance != Security
Rise in the salary of medical workers is the one off the easy solution to provide protection against the theft of health data records. On other hand low rank health workers can be the most ideal person to get the patient...
In reply to: Medical Workers
Thanks for those links @BrianFoster. (and sorry about the spam! it's gone now..)I am definitely going to take a look at the DOJ release and check out the video from the U.S. Senate Judiciary Committee hearing. Looks like...
In reply to: Re: Blueprint for fighting cyber infections
Tweet This
