3 ms·

I sell B2B security software, which is mainly used for compliance in a niche market. The software, of used correctly and integrated into processes, really can

I sell B2B security software, which is mainly used for compliance in a niche market. The software, of used correctly and integrated into processes, really can add a meaningful extra layer of security. However, lots of our customers just want to tick a compliance box that they can point assessors to. Kind of sad :(

Spivak 6y ago
When you’re protecting someone else’s data you have no incentive to keep it secure beyond the minimum to cover your ass from regulators and lawsuits. It’s not so sad so much as maligned incentives. Data breaches are common, companies aren’t really punished for them, and the harm to the user is vague and doesn’t typically materialize in any visible way so they’re little outrage outside our bubble.