>executive director of information security at Sony Pictures > > >So basically their thinking was that getting hacked was just the cost of doing business This

>executive director of information security at Sony Pictures > > >So basically their thinking was that getting hacked was just the cost of doing business This isnt their thinking. Industry wide belief is that CIOs role is minimizing financial liability, NOT maximizing security. something like this: http://www.washington.edu/research/centers/126 http://www.washington.edu/research/centers/126 http://www.pce.uw.edu/certificates/information-security-risk-management.html http://www.pce.uw.edu/certificates/information-security-risk... Where professors are >50 year old bumbling fools proudly proclaiming they know f'all about technology, and whole thing revolves around staying compliant (on paper) with federal law (SOX etc) and industry standards (PCI). I wasted time taking online versions of those courses. Wrote about it previously here https://news.ycombinator.com/item?id=7353205 https://news.ycombinator.com/item?id=7353205 "CIOs are actively discouraged from possessing any IT background. Just look at the retardation UW is teaching: https://www.coursera.org/course/inforiskman https://www.coursera.org/course/inforiskman https://www.coursera.org/course/inforisk https://www.coursera.org/course/inforisk https://www.coursera.org/course/infosec https://www.coursera.org/course/infosec Those "people", they call themselves teachers/professionals in the field, will tell you that Information Security is ALL about covering your ass and shifting blame to a third party. All three courses are about getting a slip of paper that says you delegated responsibility clearing your company from any lawful obligations in case of a breach. Not a single peep about technical aspects or real security of data/infrastructure. Its all about getting that "we paid company X to do it for us" waiver. There was (deleted now) a huge thread on Coursera forum titled Disappointment covering this topic and demonstrating total lack of professionalism or any real world knowledge. Whole UW program is a government funds skimming scheme. Just look at this garbage: "Center of Information Assurance and Cybersecurity at the University of Washington, designated by the NSA/DHS as a Center for Academic Excellence in Information Assurance Education and Research" I highly encourage you to check out those courses (I think there is preview available for old lectures) if you are in need of a laugh, or reality check concerning state of CIO education."