3 ms·
Yeah, I think you really hit the nail on the head with this one. I want folks to be held accountable, but considering the forces/incentives at play, I worry wha
by hn_throwaway_99 3y ago
Yeah, I think you really hit the nail on the head with this one. I want folks to be held accountable, but considering the forces/incentives at play, I worry what you're left with is a CISO role that no sane person would take, so instead it's just taken by grifters who take the "gambling" route - let's just hope the chance that some major breach happens doesn't do so on my watch, but if it's "damned if I do, damned if I don't", might as well collect a fat paycheck while I see what happens.
- pm90 3y agohe could have resigned
- hn_throwaway_99 3y agoExactly my point - if he resigned quietly, the company would hire a "yes man" that exactly fits the profile I described. If he resigned loudly, he probably would be pretty unhireable, at least as another CISO. In neither case do the customers at any company get the benefit of actual improved security.
- asah 3y agonah - SolarWinds was known bad stuff, and easily explained to the next employer.