3 ms·
Why? IT professionals raise concerns all the time and those concerns are virtually always dismissed by management because costs. Someone made that decision and
by infamouscow 5y ago
Why? IT professionals raise concerns all the time and those concerns are virtually always dismissed by management because costs. Someone made that decision and they should be held to account for it.
You're perpetuating the problem.
- AnIdiotOnTheNet 5y agoI've yet to see any IT person who says this kind of thing perform the actual risk assessment math that shows management made the wrong decision.
- x86_64Ubuntu 5y agoAre you implying that somewhere along the way, the math works out that management shouldn't listen to IT? I'm stretched trying to reach that viewpoint how the math works out when you company gets Colonial Pipeline'd
- AnIdiotOnTheNet 5y agoYes, I'm saying that it is completely possible that the risk assessment could say that the damages of an attack like this are ultimately less expensive than the cost of mitigating them when probabilities are accounted for. I don't know that that's true, but I don't know that it is untrue either, because nobody is talking about the risk assessment math, most especially people calling for massive infosec increases.