3 ms·
My reading of this list is that it's not designed to be a starting point for a full security programme, but a starting point for small organizations who don't e
by raesene9 5y ago
My reading of this list is that it's not designed to be a starting point for a full security programme, but a starting point for small organizations who don't even have a security function yet.
In an ideal world, every company would have dedicated resource for this and a well targeted/justified programme of work, but I think there's quite a few where responsibility falls on the CTO and there lists like this can be useful.
- aahortwwy 5y agoThis list and others like it are for sure useful, but the CTO of a smaller organization still needs to be able to: - Prioritize items on this list relative to each other. - Prioritize items on this list relative to other work. - Communicate the reasons for that prioritization to other members of leadership, at least.