Risk //

Compliance

2/26/2014
12:13 PM
50%
50%

Compliance Is Not Hard

Compliance requires a new set of healthy habits and the self-discipline to make those habits stick

I've been paying more attention to what I eat the past few months. I'm not dieting, although I would like to lose about 10 pounds, but I am trying to eat healthier. The human part of maintaining self-discipline is a challenge, because fats and sugar taste great! And we are genetically wired to eat more than we need so our bodies can save calories for times of famine (which is not the same as when I forget to buy more cereal).

The other big challenge is that bad food choices are more commonly available than good choices. I'm on the go, and I eat lots of meals while traveling. Sure, most restaurants have salads and "healthy" choices. But the most common food choices are served in huge portions and loaded with unhealthy, but very tasty, ingredients.

So what in the world does eating have to do with compliance? Both are a matter of focus and discipline. It is easier to start a diet, or focus on compliance, "tomorrow." We know we need to pay attention to our personal and business health. Yet most of us defer because it is so much easier.

People tend to look at compliance the way they look at diets: as "extra" efforts. We are all busy, and when busy, anything extra is the easiest to defer. Sure, we know that one day poor compliance behavior, just like bad food choices, will require a much bigger effort to correct. We struggle because today is filled with deadlines, distractions, and temptation.

The reality is that the businesses best at compliance, just like people who eat the healthiest, don't think of it as something beyond what is expected of them. Being healthy is not an extra activity -- it is a lifestyle. Compliance is not extra effort; it is how your organization functions every day over the long haul, not merely a short-term initiative.

Changes to create a better business or personal lifestyle are rarely timely and usually inconvenient. And they require strong leadership, discipline, and commitment. Those who make smart, nutritious food choices spend less time on health problems. Their food choices become a habit, not a challenge, and successfully adopting a healthy diet is contagious; it builds momentum and excitement in other aspects of their life.

For businesses, the upside of a daily focus on compliance and security is the ability to function more efficiently. These organizations spend less time on crisis situations, in general, and are usually able to avoid creating their own crises. Companies that lack the self-discipline to become compliant suffer a great many self-inflicted wounds.

You should get over thinking of compliance as something hard. It actually only requires a new set of healthy habits and the self-discipline to make those habits stick.

Glenn S. Phillips hopes you choose your compliance and food habits wisely. He is the president of Forte' Incorporated, where he works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. Glenn is the author of the book Nerd-to-English and you can find him on twitter at @NerdToEnglish. Glenn works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. The Founder and Sr. Consultant of Forte' Incorporated, Glenn and his team work with business leaders to support growth, increase profits, and address ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
AndyW814
100%
0%
AndyW814,
User Rank: Apprentice
3/17/2014 | 9:54:54 PM
re: Compliance Is Not Hard
Please don't take thiswrong but my firstthought is "Have you ever actually worked in a business larger than 5 people?" Sure compliance is easy if you don't have to involve anyone else in the business. If you get to make all of the decisions. If you don't have to take into consideration all of the potential impacts to every line of business in the company and come up witha workable solution that everyone will buy into. You are right the compliance part is easy is the things that fight compliance that are hard.
Valentine's Emails Laced with Gandcrab Ransomware
Kelly Sheridan, Staff Editor, Dark Reading,  2/14/2019
High Stress Levels Impacting CISOs Physically, Mentally
Jai Vijayan, Freelance writer,  2/14/2019
Mozilla, Internet Society and Others Pressure Retailers to Demand Secure IoT Products
Curtis Franklin Jr., Senior Editor at Dark Reading,  2/14/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-8903
PUBLISHED: 2019-02-18
index.js in Total.js Platform before 3.2.3 allows path traversal.
CVE-2019-6453
PUBLISHED: 2019-02-18
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).
CVE-2019-8372
PUBLISHED: 2019-02-18
The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link an...
CVE-2019-8902
PUBLISHED: 2019-02-18
An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.
CVE-2019-8423
PUBLISHED: 2019-02-18
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.