4 ms·

Indeed. This should be a standard set by every board: depending on the size of the data breach, the cut on executive salaries goes from 10 all the way to to 50%

Indeed. This should be a standard set by every board: depending on the size of the data breach, the cut on executive salaries goes from 10 all the way to to 50% -- including bonus and stock comp. I bet you we'd drastically reduce the number of companies get hacked overnight.

antonvs 1y ago
> I bet you we'd drastically reduce the number of companies get hacked overnight. The problem is that execs and companies in general don’t know how to achieve that. A great deal of security work at companies is cargo cult stuff designed to meet vague and largely irrelevant standards, without any real engagement with what’s happening in the company’s actual systems. This is not the kind of problem that can be solved simply by motivating the kind of execs that have been allowed to succeed at today’s companies.
- franga2000 1y ago
  The flip side is true, however: the problem can not be solved without motivating the execs. At the end of the day, if the pile of cash they take home at the end of the day isn't inversely proportional to the number of people they fucked over, the best case is they don't care and the worst case is they'll notice that there's money to be saved (and therefore transfered to their pile) by fucking people over and do it even more. Note that I didn't just say "number of people whose data was leaked" - the same thing applies to other ways of fucking over your users or even employees. Aligning execs' inventives usually isn't the whole solution, but it usually is a necessary part of the solution.
- hulitu 1y ago
  > The problem is that execs and companies in general don’t know how to achieve that. Would they buy an Mercedes AMG when it will be stoled the next day ? The main problem is that nobody was fired for stollen employee/user data.

4 ms·

Indeed. This should be a standard set by every board: depending on the size of the data breach, the cut on executive salaries goes from 10 all the way to to 50%

by guiambros 1y ago

antonvs 1y ago
> I bet you we'd drastically reduce the number of companies get hacked overnight. The problem is that execs and companies in general don’t know how to achieve that. A great deal of security work at companies is cargo cult stuff designed to meet vague and largely irrelevant standards, without any real engagement with what’s happening in the company’s actual systems. This is not the kind of problem that can be solved simply by motivating the kind of execs that have been allowed to succeed at today’s companies.
- franga2000 1y ago
  The flip side is true, however: the problem can not be solved without motivating the execs. At the end of the day, if the pile of cash they take home at the end of the day isn't inversely proportional to the number of people they fucked over, the best case is they don't care and the worst case is they'll notice that there's money to be saved (and therefore transfered to their pile) by fucking people over and do it even more. Note that I didn't just say "number of people whose data was leaked" - the same thing applies to other ways of fucking over your users or even employees. Aligning execs' inventives usually isn't the whole solution, but it usually is a necessary part of the solution.
- hulitu 1y ago
  > The problem is that execs and companies in general don’t know how to achieve that. Would they buy an Mercedes AMG when it will be stoled the next day ? The main problem is that nobody was fired for stollen employee/user data.