3 ms·
You limit your example to a perfect world scenario in which IR is the only reactionary discipline. If you want to see just how much Kirk was right look at any
by dogma1138 7y ago
You limit your example to a perfect world scenario in which IR is the only reactionary discipline.
If you want to see just how much Kirk was right look at any major breach and how companies react to it for example the Equifax beach.
Yeah their IR team might have dealt with the no-win scenario as you mention, but their senior management Kirked the hell out of it by selling stock shortly after the breach was discovered to ensure they don’t their fortune and then the corporate machine was set into play to ensure that the company gets mostly unscathed from the entire ordeal.
So IR did their job, they fell on their swords and what not, but the execs, the lawyers, lobbyists an the PR folks just shrugged and said that’s nice let us show you how it’s really done.
- badrabbit 7y agoI don't get what you are saying. Infosec teams are part of the company, if they choose to capitalize on a breach, good for them. They still lost, like i said earlier, making the best out of a loss does not change the fact that there was a loss. Their brand reputation will always be inferior because of this. They accepted loss so they tried to lose well. Not accepting loss would be to not be prepared because your security is too good or to refuse to disclose the public because of consequences right?