Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk //

Compliance

2/26/2014
12:13 PM
50%
50%

Compliance Is Not Hard

Compliance requires a new set of healthy habits and the self-discipline to make those habits stick

I've been paying more attention to what I eat the past few months. I'm not dieting, although I would like to lose about 10 pounds, but I am trying to eat healthier. The human part of maintaining self-discipline is a challenge, because fats and sugar taste great! And we are genetically wired to eat more than we need so our bodies can save calories for times of famine (which is not the same as when I forget to buy more cereal).

The other big challenge is that bad food choices are more commonly available than good choices. I'm on the go, and I eat lots of meals while traveling. Sure, most restaurants have salads and "healthy" choices. But the most common food choices are served in huge portions and loaded with unhealthy, but very tasty, ingredients.

So what in the world does eating have to do with compliance? Both are a matter of focus and discipline. It is easier to start a diet, or focus on compliance, "tomorrow." We know we need to pay attention to our personal and business health. Yet most of us defer because it is so much easier.

People tend to look at compliance the way they look at diets: as "extra" efforts. We are all busy, and when busy, anything extra is the easiest to defer. Sure, we know that one day poor compliance behavior, just like bad food choices, will require a much bigger effort to correct. We struggle because today is filled with deadlines, distractions, and temptation.

The reality is that the businesses best at compliance, just like people who eat the healthiest, don't think of it as something beyond what is expected of them. Being healthy is not an extra activity -- it is a lifestyle. Compliance is not extra effort; it is how your organization functions every day over the long haul, not merely a short-term initiative.

Changes to create a better business or personal lifestyle are rarely timely and usually inconvenient. And they require strong leadership, discipline, and commitment. Those who make smart, nutritious food choices spend less time on health problems. Their food choices become a habit, not a challenge, and successfully adopting a healthy diet is contagious; it builds momentum and excitement in other aspects of their life.

For businesses, the upside of a daily focus on compliance and security is the ability to function more efficiently. These organizations spend less time on crisis situations, in general, and are usually able to avoid creating their own crises. Companies that lack the self-discipline to become compliant suffer a great many self-inflicted wounds.

You should get over thinking of compliance as something hard. It actually only requires a new set of healthy habits and the self-discipline to make those habits stick.

Glenn S. Phillips hopes you choose your compliance and food habits wisely. He is the president of Forte' Incorporated, where he works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. Glenn is the author of the book Nerd-to-English and you can find him on twitter at @NerdToEnglish. Glenn works with business leaders who want to leverage technology and understand the often hidden risks awaiting them. The Founder and Sr. Consultant of Forte' Incorporated, Glenn and his team work with business leaders to support growth, increase profits, and address ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
AndyW814
100%
0%
AndyW814,
User Rank: Apprentice
3/17/2014 | 9:54:54 PM
re: Compliance Is Not Hard
Please don't take thiswrong but my firstthought is "Have you ever actually worked in a business larger than 5 people?" Sure compliance is easy if you don't have to involve anyone else in the business. If you get to make all of the decisions. If you don't have to take into consideration all of the potential impacts to every line of business in the company and come up witha workable solution that everyone will buy into. You are right the compliance part is easy is the things that fight compliance that are hard.
COVID-19: Latest Security News & Commentary
Dark Reading Staff 10/23/2020
7 Tips for Choosing Security Metrics That Matter
Ericka Chickowski, Contributing Writer,  10/19/2020
Russian Military Officers Unmasked, Indicted for High-Profile Cyberattack Campaigns
Kelly Jackson Higgins, Executive Editor at Dark Reading,  10/19/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-24847
PUBLISHED: 2020-10-23
A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_adv.php, an unauthenticated attacker can lure the victim to visit his website by social engineering or another attack vector. Due to this issue, an unauthenticat...
CVE-2020-24848
PUBLISHED: 2020-10-23
FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain complete persistent access to the local system.
CVE-2020-5990
PUBLISHED: 2020-10-23
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege escalation, code execution, denial of service or information disclosure.
CVE-2020-25483
PUBLISHED: 2020-10-23
An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.
CVE-2020-5977
PUBLISHED: 2020-10-23
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.