3 ms·
Fines for these kinds of things don't work. They just get factored in as overhead. Penalties should effect people not budgets. Nobody would be lax with security
by thereddaikon 6y ago
Fines for these kinds of things don't work. They just get factored in as overhead. Penalties should effect people not budgets. Nobody would be lax with security if administrators went to jail every time there was a data incident on their watch.
- fennecfoxen 6y agoGreat way to promote outsourcing to another jurisdiction.
- zizee 6y agoJust imagine the quality of the candidates you'd have applying to admin jobs if they risked going to jail everytii there was a data incident. It's hard to imagine anyone with half a brain working under such conditions. It's also hard to imagine that putting such a measure in place would not result in data and systems being so locked down that they become unusable to most staff.
- alasdair_ 6y agoI’m a pretty decent programmer and I like to think that I know a lot more about computer security than most developers. I know for certain that if a well funded nation state went after data on a system I built, they would likely get it, no matter how hard I tried to prevent it. There needs to be real audits, with teeth, of computer security stuff - audits run in an adversarial way without the issues involves in financial audits. If you pass the audit, the fines should be minimal in the event of a breach.