Risk // Compliance
2/26/2014
12:13 PM
50%
50%

Compliance Is Not Hard

Compliance requires a new set of healthy habits and the self-discipline to make those habits stick

I've been paying more attention to what I eat the past few months. I'm not dieting, although I would like to lose about 10 pounds, but I am trying to eat healthier. The human part of maintaining self-discipline is a challenge, because fats and sugar taste great! And we are genetically wired to eat more than we need so our bodies can save calories for times of famine (which is not the same as when I forget to buy more cereal).

The other big challenge is that bad food choices are more commonly available than good choices. I'm on the go, and I eat lots of meals while traveling. Sure, most restaurants have salads and "healthy" choices. But the most common food choices are served in huge portions and loaded with unhealthy, but very tasty, ingredients.

So what in the world does eating have to do with compliance? Both are a matter of focus and discipline. It is easier to start a diet, or focus on compliance, "tomorrow." We know we need to pay attention to our personal and business health. Yet most of us defer because it is so much easier.

People tend to look at compliance the way they look at diets: as "extra" efforts. We are all busy, and when busy, anything extra is the easiest to defer. Sure, we know that one day poor compliance behavior, just like bad food choices, will require a much bigger effort to correct. We struggle because today is filled with deadlines, distractions, and temptation.

The reality is that the businesses best at compliance, just like people who eat the healthiest, don't think of it as something beyond what is expected of them. Being healthy is not an extra activity -- it is a lifestyle. Compliance is not extra effort; it is how your organization functions every day over the long haul, not merely a short-term initiative.

Changes to create a better business or personal lifestyle are rarely timely and usually inconvenient. And they require strong leadership, discipline, and commitment. Those who make smart, nutritious food choices spend less time on health problems. Their food choices become a habit, not a challenge, and successfully adopting a healthy diet is contagious; it builds momentum and excitement in other aspects of their life.

For businesses, the upside of a daily focus on compliance and security is the ability to function more efficiently. These organizations spend less time on crisis situations, in general, and are usually able to avoid creating their own crises. Companies that lack the self-discipline to become compliant suffer a great many self-inflicted wounds.

You should get over thinking of compliance as something hard. It actually only requires a new set of healthy habits and the self-discipline to make those habits stick.

Glenn S. Phillips hopes you choose your compliance and food habits wisely. He is the president of Forte' Incorporated, where he works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. Glenn is the author of the book Nerd-to-English and you can find him on twitter at @NerdToEnglish. Glenn works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. The Founder and Sr. Consultant of Forte' Incorporated, Glenn and his team work with business leaders to support growth, increase profits, and address ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
AndyW814
100%
0%
AndyW814,
User Rank: Apprentice
3/17/2014 | 9:54:54 PM
re: Compliance Is Not Hard
Please don't take thiswrong but my firstthought is "Have you ever actually worked in a business larger than 5 people?" Sure compliance is easy if you don't have to involve anyone else in the business. If you get to make all of the decisions. If you don't have to take into consideration all of the potential impacts to every line of business in the company and come up witha workable solution that everyone will buy into. You are right the compliance part is easy is the things that fight compliance that are hard.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading December Tech Digest
Experts weigh in on the pros and cons of end-user security training.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-4807
Published: 2014-11-22
Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service (CPU consumption) via a '\0' character.

CVE-2014-6183
Published: 2014-11-22
IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1.2.0 FP9, 5.1.2.1 before FP5, 5.2 before 5.2.0.0 FP5, and 5.3 before 5.3.0.0 FP1 on XGS devices allows remote authenticated users to execute arbitrary commands via unspecified vectors.

CVE-2014-8626
Published: 2014-11-22
Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding...

CVE-2014-8710
Published: 2014-11-22
The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.

CVE-2014-8711
Published: 2014-11-22
Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Now that the holiday season is about to begin both online and in stores, will this be yet another season of nonstop gifting to cybercriminals?