4 ms·
These frameworks don’t guarantee security, but there is a stark difference between companies that do this and those who don’t. Companies that follow these frame
by SkyPuncher 3y ago
These frameworks don’t guarantee security, but there is a stark difference between companies that do this and those who don’t. Companies that follow these frameworks are at least attempting to be secure.
- tptacek 3y agoEven that is false. Companies that follow these frameworks are performing security, at the expensive actually building security.
- SkyPuncher 3y agoIn my experience, the companies not following these frameworks aren't even _performing_ security. Everyone here is correct that you need more than just these frameworks/audits to be secure. However, most companies that are secure following these frameworks. If you're secure, these frameworks are a no-brainer to certify against.
- tptacek 3y agoNo, I reject your premise, for all the reasons I've stated on this thread.