4 ms·
You know these are the floor of what you should do, not the ceiling. If a big company can’t explain why they aren’t doing the bare minimum defined in a framewo
by genmud 3y ago
You know these are the floor of what you should do, not the ceiling.
If a big company can’t explain why they aren’t doing the bare minimum defined in a framework, that’s a red flag.
There are open source solutions for the majority of controls in these frameworks. It isn’t 1995.
- tptacek 3y agoMy argument is that they're lower than the floor, which makes using them to try to detect the floor dangerous.
- genmud 3y agoHaving worked with a number of different companies, and these frameworks are the floor of best practices, these frameworks are far above the subterranean caverns many companies operate their security postures from.