3 ms·
> The timescales in play here seem terrible from Blackbaud's discovery to initial report. That’s going to keep happening until someone gets the book thrown at
by save_ferris 6y ago
> The timescales in play here seem terrible from Blackbaud's discovery to initial report.
That’s going to keep happening until someone gets the book thrown at them for slow-walking a response. I know this is a pretty anti-regulatory crowd, but we can’t expect this behavior to change if there are no consequences.
- zepto 6y agoConsequences don’t have to be regulatory. How about an opt-in scoreboard or ratings system for responses, with some objective criteria? Regulation would need to be based on objective criteria anyway, so why not develop them as an industry?
- save_ferris 6y agoYou think a ratings system would deter companies from misbehaving? The credit rating agencies have some of the lowest consumer confidence scores in the entire country, and yet Equifax suffered no consequences from its massive breach a few years ago. Also, your suggestion is opt-in. Why would any company volunteer themselves to be scrutinized in such a faux way?
- zepto 6y agoI agree - credit ratings companies are garbage. But it doesn’t follow that all rating systems will be garbage for all time. The rating system would not deter misbehavior. ‘Misbehavior’ in this case is just competence. The rating system would give clients some transparency into the competence of the service provider. Any company that was confident in its processes would volunteer for scrutiny because it would be positive for their credibility, just like other independent certifications. The question would then become - why would a customer choose an unrated company?