3 ms·
There exists some space between no penalty and a penalty that effectively kills the company.
by KGIII 9y ago
There exists some space between no penalty and a penalty that effectively kills the company.
- watwut 9y agoBesides, there exists the level of mismanagement which deserves to tank the company. Investment in security costs money. Ignoring it saves money and gives company advantage against competitors who invested into it - untill breach happens. If we then effectively ok breach, we practically ensured that only bad security companies will remain living in the long term.
- jessaustin 9y agoTaleb called this "picking up pennies in front of a steamroller". You make a little money every day, until you get killed. Lots of management consultants specialize in recommending this stupid practice, because corporate executives can't get enough of it. It doesn't seem likely we'll see a law that effectively punishes firms for this behavior in the PII security context, because the same behavior in other contexts led not to failing firms but rather to "too big to fail" and bailouts.