So now the question becomes, how do we measure our “security debt” when performing an audit? Because we really need to realize that our debt will be paid by our partners and our customers. It is commonly skipped over that the penalty for not securing our systems, sadly, is never paid by the people who chose not to secure the systems.
Similar posts
encryption
Why Target's Breach Included PIN Data
Last Friday Target issued an update acknowledging that encrypted PIN data were included in the data stolen in their recent breach. This quickly...
Red Teaming - Not What You May Have Thought
Lately, I’ve been doing a lot of reading on some less technical topics and I ran across “Red Team: How to Succeed By Thinking Like the Enemy”...
Decoding Security Jargon
If you pick up just about any security textbook it will begin by describing security using terms such as threats, risks, vulnerabilities, exposures,...