3 ms·
The idea that you should inspect your systems for risk and then mitigate that risk should not be considered onerous. The idea that you should protect your Gran
by jollofricepeas 6y ago
The idea that you should inspect your systems for risk and then mitigate that risk should not be considered onerous.
The idea that you should protect your Grandma’s healthcare data and encrypt it should not be considered onerous.
If software development was actually “real” engineering, we’d have no need for HIPAA and something as obvious as its risk management statute.
HIPAA is what happens when the tech industry acts irresponsibly and fails to police itself. We continue to choose features over security/maintenance.
- Centigonal 6y agoThis is how every discipline evolves. Do you think building codes and fire codes were thought up out of thin air? Do you think the FDA came into existence just because? The SEC was created in 1933, as direct result of the Great Depression. Dodd-Frank and CFPB were a direct result of the 2008 financial crisis. Every discipline starts out without regulation, until it inflicts some injury upon society that motivates the creation of regulation, which then often calcifies the industry and creates barriers for new entrants. The difference with data is just that we happen to be alive to see that transformation taking place.