6 ms·
That is why government intervention is needed. Australia is proposing significant changes to its cyber security framework and legislation. https://www.homeaffai
by softveda 4y ago
That is why government intervention is needed. Australia is proposing significant changes to its cyber security framework and legislation.
https://www.homeaffairs.gov.au/reports-and-pubs/files/strengthening-australia-cyber-security-regulations-discussion-paper.pdf https://www.homeaffairs.gov.au/reports-and-pubs/files/streng...
Mandatory cyber security obligations backed by penalties and direct government intervention for critical national security companies.
https://www.homeaffairs.gov.au/reports-and-pubs/files/exposure-draft-bill/exposure-draft-security-legislation-amendment-critical-Infrastructure-bill-2020.pdf https://www.homeaffairs.gov.au/reports-and-pubs/files/exposu...
- pm90 4y agoWe kinda sorta already have laws designed to make software systems secure, but they aren't really followed in spirit. I suspect what's needed is an expansion of NIST-like bodies, more concrete specifications for what is and isn't allowed (e.g. like seatbelt regulations) and such. Ultimately, its going to be a cat and mouse game. A really determined hacker will find a way. But admin users with permissions over everything, passwords/encryption keys stored in plaintext etc. these are things that we can probably patch up really well, and force companies that can't afford to do that to (justifiably) go out of business.