4 ms·
As a retired IT Exec (I worked in Cdn banking for over a decade) this kinda thing used to keep me up at night! To mitigate the risk I wanted to implement a bla
by canada_dry 7y ago
As a retired IT Exec (I worked in Cdn banking for over a decade) this kinda thing used to keep me up at night!
To mitigate the risk I wanted to implement a blanket USB plug-n-play restriction but the client-side Execs overruled me. Fortunately a leak never happened, but really it was just good fortune.
- Terretta 7y agoAs a current IT exec in banking, a thing that keeps me up at night is the “go to” strategy of compromising employees’ ability to use productivity tools for “security”. If you follow the lock-it-down strategy to the max, you eventually unplug the computer and keep it in a vault. Since you wouldn’t do that, that means you recognize that security can’t be at the expense of all utility. So what is the right amount of utility to sacrifice in order to achieve security? I’d argue — try for none. Make infosec the happy path.