4 ms·
It's not the IT workers saying that their secure, it's us telling the business that we need X dollars to mitigate risk of Y. And then the accounting people are
by x86_64Ubuntu 5y ago
It's not the IT workers saying that their secure, it's us telling the business that we need X dollars to mitigate risk of Y. And then the accounting people are like "But it hasn't happened yet, why would we pay to prevent something that hasn't happened yet!???"
- COGlory 5y agoCan we go after these decision makers for negligence, then?
- tyingq 5y agoIt feels like a chicken-egg problem. The actual consequences to the business aren't often serious, so it's difficult for them to get support to spend serious money on it. Maybe mandatory high-cost, high-limit cyber insurance, with dramatically lower rates provided you can prove x/y/z, would make for an incentive?
- x86_64Ubuntu 5y agoProbably not. We can't even go after businesses when they do something that's clearly awful. Much less when the thing they most hurt is their bottom line.