topic Re: Is security creeping out of the shadows yay or nay? in Industry News

Is security creeping out of the shadows yay or nay?

Caute_cautim — Mon, 09 Oct 2023 09:26:15 GMT

Hi All A lot of have been involved in security for many decades, and we have seen much change?

But is it really creeping out of the shadows?

https://www.csoonline.com/article/3526478/why-security-is-creeping-out-of-the-shadows.html?utm_source=Adestra&utm_medium=email&utm_content=Read%20more%3A%20Why%20security%20is%20creeping%20out%20of%20the%20shadows&utm_campaign=CSO%20Australia%20Data%20Security%20Briefing&utm_term=CSO%20Australia%20Data%20Security%20Briefing&utm_date=20200213183846

What is your opinion?

Regards

Caute_cautim

Re: Is security creeping out of the shadows yay or nay?

dcontesti — Fri, 14 Feb 2020 12:05:33 GMT

So my nickel Canadian......

I think it is creeping out of the shadows but believe that is being caused by all the noise, etc. being generated by Ransomware and a lot of the new regulations that are now facing organizations (GDPR, CCPA, HIPAA, etc....). Sarbannes-Oxley started us down the path but the latest additions have pushed us over the top.

Iin the past, we could talk to management about Security and the issues (the risk, the threat), etc. and were mostly ignored. We did get attention if there was a breach (either ours or close to home) but then when the buzz died down so did the funds and the attention.

Board audit committees are actively asking questions about how organizations are protecting themselve and staying within the letter of the law.

So, I would vote "Yay"

Regards

Re: Is security creeping out of the shadows yay or nay?

Shannon — Sat, 07 Mar 2020 22:50:35 GMT

Hell yay. Some years back the decision-makers in environments I worked in would see Information Security as an unnecessary expense --- their usual attitude was 'leave well enough alone' or 'if it isn't broken don't fix it.'

Nowadays, it's seen as essential, particularly because regulatory authorities mandate it --- at least where I'm based right now. (Saudi Arabia)

In the event of attacks on the IT infrastructure, the stakeholders may have to justify the inadequacy of compliance with IT security requirements.