Would you believe me if I argued that without those standards and requirements (which are generally few and modest compared to what is the case in virtually all other industries) things would be even worse?
~20 years of InfoSec security standards and compliance audits, exceeding $120B in annual spend, and the result is essentially everything to be hacked all the time — and getting worse.
Forgive me if the well-indended WH EO calling for more regs and audits doesn’t excite me.
2
3
The model is backwards. Put a flag in your system that an attacker can set for a monthly payment, and THEY have to keep everyone else out while allowing the business to operate, otherwise the next attacker could change the flag and collect the payment.
May 14, 2021 · 3:58 PM UTC
1
1


