The CEO I was talking with didn't understand his own company's compliance requirements. And he didn't want to understand them. He had delegated this, as many in business do, to his IT director. "Technology will fix this problem" is a common approach.
The company's IT director had actually made a good-faith effort to understand the compliance regulations. He had implemented a number of changes to his team's processes and procedures: new password rules, more detailed logging, database security changes, and so forth.
There are actually major problems with this all-too-common approach:
Keep up with the latest cybersecurity threats, newly-discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Subscribe
