2 ms·
I've yet to see any IT person who says this kind of thing perform the actual risk assessment math that shows management made the wrong decision.
by AnIdiotOnTheNet 5y ago
I've yet to see any IT person who says this kind of thing perform the actual risk assessment math that shows management made the wrong decision.
- x86_64Ubuntu 5y agoAre you implying that somewhere along the way, the math works out that management shouldn't listen to IT? I'm stretched trying to reach that viewpoint how the math works out when you company gets Colonial Pipeline'd
- AnIdiotOnTheNet 5y agoYes, I'm saying that it is completely possible that the risk assessment could say that the damages of an attack like this are ultimately less expensive than the cost of mitigating them when probabilities are accounted for. I don't know that that's true, but I don't know that it is untrue either, because nobody is talking about the risk assessment math, most especially people calling for massive infosec increases.