3 ms·
Having good people is necessary but not sufficient for good security. In many cases, management isn't even aiming for compliance much less actual security. This
by throwaway894345 5y ago
Having good people is necessary but not sufficient for good security. In many cases, management isn't even aiming for compliance much less actual security. This is based off of multiple close friends and family in the banking and bank auditing world in the US as well as my own experiences working on financial software (including the relevant regulatory and compliance bodies as well as the many banks who were our customers); can't speak to UK specifically.
- 123pie123 5y agoFrom my past uk financial security experience - security personal can highlight and raise risks with any decision made by the business or other techies. the higher the risk the more hoops you need to jump through for security sign off (to the point where they will not sign it off) and higher the risk, the higher up the food chain of managment that is needed to sign it off obv if the execs are not bothered about security then anything can happen but if something goes wrong a big finger will be pointing at that person who signed it off - which seems in it self a massive deterrent