4 ms·
The Pentagon should move away from giving contractors checklists to complete and start actively pentesting them before clearing them to do work. "Security thro
by i_am_proteus 8y ago
The Pentagon should move away from giving contractors checklists to complete and start actively pentesting them before clearing them to do work.
"Security through bureaucracy" does not work.
- toomuchtodo 8y agoThis would help, but findings and audit reports aren’t enough. You need to revoke clearances for pen testing findings that aren’t resolved in a timely manner, or repeated failings. I would also like to see claw backs and penalties for data leakage considering the sensitive nature of the data. You get what you measure, incentives matter, and all those cliches.