Risk // Compliance
2/26/2014
12:13 PM
50%
50%

Compliance Is Not Hard

Compliance requires a new set of healthy habits and the self-discipline to make those habits stick

I've been paying more attention to what I eat the past few months. I'm not dieting, although I would like to lose about 10 pounds, but I am trying to eat healthier. The human part of maintaining self-discipline is a challenge, because fats and sugar taste great! And we are genetically wired to eat more than we need so our bodies can save calories for times of famine (which is not the same as when I forget to buy more cereal).

The other big challenge is that bad food choices are more commonly available than good choices. I'm on the go, and I eat lots of meals while traveling. Sure, most restaurants have salads and "healthy" choices. But the most common food choices are served in huge portions and loaded with unhealthy, but very tasty, ingredients.

So what in the world does eating have to do with compliance? Both are a matter of focus and discipline. It is easier to start a diet, or focus on compliance, "tomorrow." We know we need to pay attention to our personal and business health. Yet most of us defer because it is so much easier.

People tend to look at compliance the way they look at diets: as "extra" efforts. We are all busy, and when busy, anything extra is the easiest to defer. Sure, we know that one day poor compliance behavior, just like bad food choices, will require a much bigger effort to correct. We struggle because today is filled with deadlines, distractions, and temptation.

The reality is that the businesses best at compliance, just like people who eat the healthiest, don't think of it as something beyond what is expected of them. Being healthy is not an extra activity -- it is a lifestyle. Compliance is not extra effort; it is how your organization functions every day over the long haul, not merely a short-term initiative.

Changes to create a better business or personal lifestyle are rarely timely and usually inconvenient. And they require strong leadership, discipline, and commitment. Those who make smart, nutritious food choices spend less time on health problems. Their food choices become a habit, not a challenge, and successfully adopting a healthy diet is contagious; it builds momentum and excitement in other aspects of their life.

For businesses, the upside of a daily focus on compliance and security is the ability to function more efficiently. These organizations spend less time on crisis situations, in general, and are usually able to avoid creating their own crises. Companies that lack the self-discipline to become compliant suffer a great many self-inflicted wounds.

You should get over thinking of compliance as something hard. It actually only requires a new set of healthy habits and the self-discipline to make those habits stick.

Glenn S. Phillips hopes you choose your compliance and food habits wisely. He is the president of Forte' Incorporated, where he works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. Glenn is the author of the book Nerd-to-English and you can find him on twitter at @NerdToEnglish. Glenn works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. The Founder and Sr. Consultant of Forte' Incorporated, Glenn and his team work with business leaders to support growth, increase profits, and address ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
AndyW814
100%
0%
AndyW814,
User Rank: Apprentice
3/17/2014 | 9:54:54 PM
re: Compliance Is Not Hard
Please don't take thiswrong but my firstthought is "Have you ever actually worked in a business larger than 5 people?" Sure compliance is easy if you don't have to involve anyone else in the business. If you get to make all of the decisions. If you don't have to take into consideration all of the potential impacts to every line of business in the company and come up witha workable solution that everyone will buy into. You are right the compliance part is easy is the things that fight compliance that are hard.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-2808
Published: 2015-04-01
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a rel...

CVE-2014-9713
Published: 2015-04-01
The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.

CVE-2015-0259
Published: 2015-04-01
OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.

CVE-2015-0800
Published: 2015-04-01
The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2...

CVE-2015-0801
Published: 2015-04-01
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818.

Dark Reading Radio
Archived Dark Reading Radio
Good hackers--aka security researchers--are worried about the possible legal and professional ramifications of President Obama's new proposed crackdown on cyber criminals.