@BrianKunick wrote:
It doesn't matter if this is a Federal Agency or private company. These security measures should not have to me "mandated." Doing more than the bare minimum is always advisable.
Yes Brian, but the reason we have mandates is because not enough people are doing it AND it is causing harm. Why do we have to wear seat belts in the US in our cars? Because people were getting hurt and dying and people were not using them. Now seat belt use is mandated and we have seen the number of fatalities go way down. Now some people could argue that it should be left up to natural selection to let those who are foolish enough to perish for not wearing them suffer the consequences of their bad decisions, but the reality is that it has an effect on all of us. More injuries in crashes means higher health care costs for everyone. Doctors/Nurses who are working to save a dying person whose injuries could have been lessened/prevented uses resources that could be being utilized elsewhere. It decreases the amount of blood available for other emergencies.
Just like in the IT world, when there are lax security measures, more than one person suffers. Enforcing more security measures raises the security bar for everyone and helps lessen the damage/use of resources for everyone. Now it doesn't mean that it is always pleasant to have to follow the mandates, but there is good logic behind them.
