3 ms·
Security has it rough as it is. Low budgets, people not really giving a shit, poor understanding of value prop. They need all the help they can get.
by xwdv 5y ago
Security has it rough as it is. Low budgets, people not really giving a shit, poor understanding of value prop. They need all the help they can get.
- sergiotapia 5y agoNobody gives a shit about security. Companies wouldn't get SOC2 certification if it wasn't required to land B2B deals. It's an expense, not an investment in the eyes of most leadership.
- Rygian 5y ago"Security […] required to land B2B deals" is what I read.
- bob1029 5y agoWe have to do all of the compliance games because of our B2B partnerships. In my view, SOC2 is equivalent to apple forcing PKI on app developers for ad-hoc testing. Ultimately a bunch of complex bullshit boilerplate that some adversarial actor could trivially usurp if they were inclined to do so. Lying to an auditor or due diligence process is not hard. Real security comes from practical experience and procedures, not bullshit busywork proposed by someone who has no clue how your business operates.
- tedunangst 5y agoPretty sure if most organizations doubled their security budget, it would end up being spent on checklist crap. All employees would have voice, thumb, and face checks to login in to their laptop, but their AWS bucket will remain wide open. I guess the context here is zero trust, so s/laptop/HR vacation request site/.