3 ms·
I Work in Data Security. Is It a Problem That My Boss Believes in Lizard People?
- toomanyrichies 2y agohttps://archive.ph/2BMMj https://archive.ph/2BMMj
- evanjrowley 2y agoA sufficiently large and complex organization should be implementing Separation of Duties (SOD) such that a person with this level of authority should not be allowed to mishandle data without going through approvals beforehand: https://csrc.nist.gov/glossary/term/separation_of_duty https://csrc.nist.gov/glossary/term/separation_of_duty So questions we should all be asking, as good citizens of this world: 1. What industries are handling sensitive data? 2. What regulatory oversight is requiring them to do it safely? Ultimately many facets of this article's premise are purely American. Look to places like Europe and even China to see how these kinds of problems are being addressed. The US has done plenty here, but there are huge exceptions that make concerns like this one very real.
- oldpersonintx 2y ago[dead]