5 ms·
What’s the alternative given that most small/medium-sized companies know very little about IT security? Seems to me like a centralized system is fine, as long
by runeks 5y ago
What’s the alternative given that most small/medium-sized companies know very little about IT security?
Seems to me like a centralized system is fine, as long as it’s properly designed and implemented. The problem is how a business can know that an IT security system is properly designed and implemented.
The only solution I see is to couple insurance with an IT security system. If you’re certain your system protects against IT threats you should be willing to compensate your customer in case it fails to do so. Otherwise your customer has a very hard time determining whether your IT security system actually works.
- throwawaygh 5y ago> What’s the alternative given that most small/medium-sized companies know very little about IT security? Removing the "remote" from "remote administration". It's more expensive but probably still not cost-prohibitive -- driving around to client sites and installing updates is not particularly skilled labor. Plus even the worst-case scenarios are far less worse because you already have a local workforce who can do site visits to manually recover systems locked down by ransomware attacks. Data might get stolen, but at least you have continuity of business.
- markzzerella 5y agoThey could even have a 'reverse shell' type button that the client has to explicitly click to enable temporary remote access.
- twistedpair 5y agoWhat if you could somehow rate limit it? e.g. you can access N remote offices per day, but not all of them. Like the time lock on a safe, to prevent these pervasive smash and grabs.