Risk // Compliance
2/26/2014
12:13 PM
50%
50%

Compliance Is Not Hard

Compliance requires a new set of healthy habits and the self-discipline to make those habits stick

I've been paying more attention to what I eat the past few months. I'm not dieting, although I would like to lose about 10 pounds, but I am trying to eat healthier. The human part of maintaining self-discipline is a challenge, because fats and sugar taste great! And we are genetically wired to eat more than we need so our bodies can save calories for times of famine (which is not the same as when I forget to buy more cereal).

The other big challenge is that bad food choices are more commonly available than good choices. I'm on the go, and I eat lots of meals while traveling. Sure, most restaurants have salads and "healthy" choices. But the most common food choices are served in huge portions and loaded with unhealthy, but very tasty, ingredients.

So what in the world does eating have to do with compliance? Both are a matter of focus and discipline. It is easier to start a diet, or focus on compliance, "tomorrow." We know we need to pay attention to our personal and business health. Yet most of us defer because it is so much easier.

People tend to look at compliance the way they look at diets: as "extra" efforts. We are all busy, and when busy, anything extra is the easiest to defer. Sure, we know that one day poor compliance behavior, just like bad food choices, will require a much bigger effort to correct. We struggle because today is filled with deadlines, distractions, and temptation.

The reality is that the businesses best at compliance, just like people who eat the healthiest, don't think of it as something beyond what is expected of them. Being healthy is not an extra activity -- it is a lifestyle. Compliance is not extra effort; it is how your organization functions every day over the long haul, not merely a short-term initiative.

Changes to create a better business or personal lifestyle are rarely timely and usually inconvenient. And they require strong leadership, discipline, and commitment. Those who make smart, nutritious food choices spend less time on health problems. Their food choices become a habit, not a challenge, and successfully adopting a healthy diet is contagious; it builds momentum and excitement in other aspects of their life.

For businesses, the upside of a daily focus on compliance and security is the ability to function more efficiently. These organizations spend less time on crisis situations, in general, and are usually able to avoid creating their own crises. Companies that lack the self-discipline to become compliant suffer a great many self-inflicted wounds.

You should get over thinking of compliance as something hard. It actually only requires a new set of healthy habits and the self-discipline to make those habits stick.

Glenn S. Phillips hopes you choose your compliance and food habits wisely. He is the president of Forte' Incorporated, where he works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. Glenn is the author of the book Nerd-to-English and you can find him on twitter at @NerdToEnglish. Glenn works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. The Founder and Sr. Consultant of Forte' Incorporated, Glenn and his team work with business leaders to support growth, increase profits, and address ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
AndyW814
100%
0%
AndyW814,
User Rank: Apprentice
3/17/2014 | 9:54:54 PM
re: Compliance Is Not Hard
Please don't take thiswrong but my firstthought is "Have you ever actually worked in a business larger than 5 people?" Sure compliance is easy if you don't have to involve anyone else in the business. If you get to make all of the decisions. If you don't have to take into consideration all of the potential impacts to every line of business in the company and come up witha workable solution that everyone will buy into. You are right the compliance part is easy is the things that fight compliance that are hard.
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.