Skip to main content

perception-of-information-security-wealth-and

Posted by: admin 15 years, 11 months ago
Great post on Not Bad for a Cubicle about the utility of information security.
In the case of Security, this means that if someone thinks they have good security, they won’t see much benefit from an increase in protections and will thus be uninterested (or even resistant) to increases in security which have even moderate cost. But if that same person believes they have poor security, then they will perceive great benefit from even a moderate increase in protection and be more willing to invest their resources in efforts which might improve it.

This ties in with my previous post about hedge fund risk. You may probably think you have great security because you haven't been breached, but in fact you don't and there is a 100% chance that you will be breached over time.
He notes:
if you actually succeed in getting someone to realize that they are security-poor, that person is probably not going to be happy and you’re probably going to be the first one they look at for an explanation of where all their security “wealth” went.

Which is probably why regulation is the biggest driver of security. If you can say "The FFIEC is now saying we're not as secure as we need to be", then the government is the scapegoat. There is a risk that many companies will seek to comply with the guidelines rather than manage their risks appropriately. They will look to the regulations rather than the potential attacks and the assets being protected.
Current rating: 1

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom