3 ms·
A potential downside to "entirely results-based" enforcement is that companies now have a negative incentive to monitor for and report data breaches. Why insta
by jackpirate 9y ago
A potential downside to "entirely results-based" enforcement is that companies now have a negative incentive to monitor for and report data breaches.
Why install an intrusion detection system if it could potentially cost the company millions when it triggers? Better just to not know that data was exfiltrated. You don't even have to cover anything up if you never learn there was a problem to begin with.
- saulrh 9y agoTwelve months ago I'd have called that a solved problem - c.f. entities like the EPA, OSHA, or NHTSA that conduct results-based inspections and investigations ("how much crap is actually in the water coming out of your pipes?", "was this injury/crash/accident a result of a violation") and come down on violators like a ton of bricks - but the suicide party is doing an excellent job of sabotaging our civilization's guardrails and sawing away at its fall-arrest lines.