4 ms·
Why wouldn't increased penalties for failure do it? We're in an environment where spending money on better security and preparing is seen as waste. If the alter
by Karunamon 6y ago
Why wouldn't increased penalties for failure do it? We're in an environment where spending money on better security and preparing is seen as waste. If the alternative is having a large fraction of your profits confiscated because you were being negligent, that seems like the most direct way to address the mindset at the organization level.
If investors ask why you're spending so much on ITSEC, you point at regulatory requirements.
- skybrian 6y agoSomeone has to point out the possibility of failure to someone who can do something about it. Where is the incentive to point it out or spend time looking for failures? Particularly when it's not their job? You need to make it someone's job. In some cases, insurance can do it. It's the insurance company's job to understand and minimize risk. But the best idea I've read is to have a regulatory agency like the NTSB.