Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
CommentaryCommentary
Commentary
Commentary
CommentaryCommentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
In my opinion the ideal organization setup for a companies information security department would be setup this way. The CSO would report directly to the CEO and keep him well informed of the high level threats to the...
In reply to: Re: Compliance != Security
Good point, @Robert McDougal. So in our survey responses, I'm guessing the Org Chart 'checkbox' in this case might lead to Chief of risk / compliance.
In reply to: Re: Compliance != Security
I totally agree, @Robert. I found the comparison to epidemiology very original and apt with respect to cybersecurity. There has always been a lot of talk about proper security hygiene but using the public health model as...
In reply to: Re: Blueprint for fighting cyber infections
Not trying to put words in @chriscinfosec's mouth but in my experience sometimes regulations put executives into a check box mentallity. This means that they believe that if they do what the regulation says then they...
In reply to: Re: Compliance != Security
Not sure I get your point @chriscinfosec about the relevance (or irrelevance) of PCI-DSS and the reporting structure of the CSO. Can you elaborate?
In reply to: Re: Compliance != Security
Great Article! Our biggest problem in this fight is the uneducated user. To use a crude analogy, the user's we have today are by and large akin to the populace prior to germ theory. People don't understand proper digital...
In reply to: Re: Blueprint for fighting cyber infections
How has outdated compliance regimes like PCI DSS negatively impacted the security posture and readiness of organizations? The industry is starting to say "A LOT" -- witness the work that SANS has done for their 20...
In reply to: Compliance != Security
Rise in the salary of medical workers is the one off the easy solution to provide protection against the theft of health data records. On other hand low rank health workers can be the most ideal person to get the patient...
In reply to: Medical Workers
Thanks for those links @BrianFoster. (and sorry about the spam! it's gone now..)I am definitely going to take a look at the DOJ release and check out the video from the U.S. Senate Judiciary Committee hearing. Looks like...
In reply to: Re: Blueprint for fighting cyber infections
It was quite a concerted effort among a number of parties. The DoJ primer, though long, is worth a read, describing the industry cooperation. http://www.justice.gov/opa/pr/2014/June/14-crm-584.html In addition, at...
In reply to: Re: Blueprint for fighting cyber infections
@Sara I suspect you are right that 16% is higher than what probably was reported a few years ago. It's also reassuring the the highest percentage of respondents say they are moving in the right direction. But without the...
In reply to: Re: if there's a silver lining...
Tweet This
