4 ms·
That is an unfair blow. What can you do as an individual in an organization that does not value security and sees it as a sunken cost? I found myself in that po
by trabant00 7y ago
That is an unfair blow. What can you do as an individual in an organization that does not value security and sees it as a sunken cost? I found myself in that position multiple times and I am a sysadmin not security guy. I have no formal responsability in that position and no incentive for covering my ass. But I still have fights with management about it.
- chii 7y agoyou don't, except to cover your ass. And so the problem remains unsolved. The law, and regulation, needs to step in. It should be as frowned upon by the law as a restaurant not meeting sanitation requirements.
- trabant00 7y ago> you don't, except to cover your ass. You might want to read my reply once more. > And so the problem remains unsolved. Why do you talk about things you don't know? I've scored multiple victories on that front. > The law, and regulation, needs to step in. I work in PCI environments. The regulations are there but few companies follow them except on paper to cover their ass. Regulations are not the solution. People are. We need to fight.
- 50656E6973 7y agoPCI regulations are weak and do little to cover the majority of threats.
- deleted 7y ago[deleted]
- ryanmarsh 7y agoIMHE Cap One took security very seriously although security expertise was not diffuse. Frankly I’m surprised their policy enforcement measures didn’t catch the misconfigured app.