Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Enterprise Cybersecurity Plans in a Post-Pandemic WorldDownload the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
User Rank: Ninja
5/16/2017 | 12:22:07 PM
1. A corporation should not worry about mockers and should stay motivated in being more secure no matter what. To me it is a duty for the sake of the company if not for that of its customers and employees. We may avoid mocking the security team after a breach or an employee after a successful phishing attempt, but a corporation has liabilities and responsibilities and frankly i do not care about its feelings.
2. ROI can be estimated for security as for anything else. It all starts with agreeing on a set of data and tracking it accordingly. The roi can be on number of incidents reduction, cost of a breach (the lower the better) as we know that it can vary based on how sensitive was the data stolen, etc...
More importantly i think IT security teams should learn how to translate what they do in business terms and rally business users that way. The divide between IT and business -which is the premise of this article- has no reason to be. Business users also have to do their share and start considering IT security as a true competitive advantage for any corporations today.