3 ms·
Cybersecurity is not a technology problem. It's a policy and enforcement problem. Ground and mid-level operating convenience will always destroy any attempt to
by causality0 5y ago
Cybersecurity is not a technology problem. It's a policy and enforcement problem. Ground and mid-level operating convenience will always destroy any attempt to create security unless strong standards of behavior are created and ruthlessly enforced. I've never seen it happen successfully outside of technology corporations staffed by nerds who actually care or the military. All it takes is one guy who knows a guy and then the admin password is on a notepad on the desk. All it takes is one guy who doesn't get a 4G signal in one room so he brings a router from home and plugs it into the network.
- samstave 5y agoThis is one of the important reasons for audits such as HIPAA, SOX, SAS70 etc... To ensure that you don't have holes in your security posture... The technology you deploy is important, but also important that your security and governance model on top of the technology is also in place.