3 ms·
I agree with everything you say. Except: >Should we really be defending companies because "they shouldn't have to pay out money to improve their security of OU
by kleer001 12y ago
I agree with everything you say. Except:
>Should we really be defending companies because "they shouldn't have to pay out money to improve their security of OUR PERSONAL DATA"?
I don't think anyone was saying that.
... and would like to add: If an idle, up to date, informal, and benign actor can poke around the sensitive bits of a company that company needs to do some serious work, possibly firing sec staff or suing previous freelancers. I think that at a high level businesses need to do due diligence, but then also trust professionals and experts that a job done is actually done.
Also, my previous statement about systemic secEd would apply here as those businesses would understand that security is a process not a destination. Right?