5 ms·
>Will they be penalized? Was Equifax ever penalized? No and no. Our Federal government is beholden to special interests, so no real legislation or regulation
by pgrote 8y ago
>Will they be penalized? Was Equifax ever penalized?
No and no.
Our Federal government is beholden to special interests, so no real legislation or regulation addressing this issue will ever occur. If Equifax (a brace of our economy) didn't receive the death penalty for what they were responsible for, nothing will occur to any future company.
- kerng 8y agoMarriot likely leaked European customers information also, so there will likely be a penalty. Probably pretty small though.
- sandworm101 8y agoI've been on the inside of some leaks and associated internal investigations. There may not be an external penalty, but these are a serious internal headache. You often have to bring in external people, who then always see the worst in everything. The board has to be kept up to speed. The meetings and late nights pile up. The absence of external penalty doesn't mean that those on the inside don't care. I'd say that most corporate infosec is motivated primarily by the desire to avoid internal investigations. Avoiding the need to report anything to shareholders and/or corporate partners comes second. External penalties is a distant third.
- karmelapple 8y agoThat’s only motivation for InfoSec, though. The CEO has to be motivated to practice good security by the bottom line implications; if having a security incident means less profit, a conscientious CEO will make sure to mitigate that risk, or at least factor it into the tradeoffs of what to do. Without any significant monetary threat, the ultimate cost of security breaches to a company isn’t truly a big deal.