7 ms·
They already have that info. In fact, they already hired a music major CISO who leaked all that data in a stunning display of executive incompetence.
by throwawaygh 5y ago
They already have that info.
In fact, they already hired a music major CISO who leaked all that data in a stunning display of executive incompetence.
- tomrod 5y agoWhen?
- johnnyo 5y agohttps://en.wikipedia.org/wiki/2017_Equifax_data_breach https://en.wikipedia.org/wiki/2017_Equifax_data_breach
- fourtrees 5y agoShe and her co-workers did fuck up badly and were unlucky enough to be under attack from one of the most powerful countries in the world. But to attribute that failure to her having received masters in composing fourteen years before, years she spent as a successful (as far as we know) Security Officer and VP at other financials seems a bit much like scapegoating.
- ratsmack 5y agoIt's amazing, but they did: https://www.marketwatch.com/story/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer-2017-09-15 https://www.marketwatch.com/story/equifax-ceo-hired-a-music-...
- detaro 5y agoThat alone really doesn't mean much. Security has even more than other areas of IT many people with "odd" backgrounds.
- throwawaygh 5y agoYes, Equifax's ciso was clearly super competent.
- detaro 5y agoI in no way suggested that, please don't pretend I did. We have plenty reason to assume she wasn't.
- throwawaygh 5y agoThen I'm not sure what the point of your post was. Software security is a mess in large part because of the phenomenon you describe.
- detaro 5y ago> Then I'm not sure what the point of your post was. That "but she has a music degree!" is the least relevant part of evaluating if someone is qualified for such a CISO role or not. Someone with the "wrong" degree but talent and relevant experience would easily beat someone with a fancy "Masters of Information Security" degree that then muddled around in less relevant areas. Focusing on people's degrees is almost always the wrong measure in IT.
- throwawaygh 5y ago> Someone with the "wrong" degree but talent and relevant experience would easily beat someone with a fancy "Masters of Information Security" degree that then muddled around in less relevant areas. Sure, totally agreed. > Focusing on people's degrees is almost always the wrong measure in IT. Maybe 20 years ago. (I was there.) Today, asking for exceptional technical depth and a proven track-record of leadership is not a big ask.
- detaro 5y agoAnd the linked article and the common references to it highlight almost exclusively "wrong degree/education" instead of "no relevant experience/track-record" (if that's the case, no clue what her experience looked like on paper. but the article also brushes it away with a sentence just to focus back on education). That's my problem with it.
- throwawayboise 5y agoNone of that information should be considered private any longer, if it ever really was.
- throwawaygh 5y agoWell, Equifax still considers it sufficient to claim your identity...