I dont when it comes to software. For say legal services, I dont have many options, as I am not an expert. The point I was trying to make is that sometimes people hire contractors because they dont have the expertise. How are they supposed to review something they dont understand? Saying every organization should have top notch IT on staff so this doesnt happen is hand-waving as well.
If you provide sensitive information to anyone that you don't have legal recourse against, then I don't really have any sympathy for you. If you make a bad business decision and it leaks my info, I'm not upset because someone took it without your approval, I'm upset because it was leaked.
There's a cost/benefit risk to everything. If you want to take the route of working with contractors, you have to weight the risks for that as well.
Brilliant, I hadnt heard of/thought of that.
"There's a cost/benefit risk to everything. If you want to take the route of working with contractors, you have to weight the risks for that as well."
True, I would just like to point out that hiring your own staff might no work out either...
But if you take the less safe/secure option, you can't expect much sympathy.
Most people do this all the time. When you have your car serviced, do you look over the work? Some people do, sure -- those who know what to look for. Most people don't, because they have no basis upon which to judge the quality of the work.
Sure some hacks happened despite companies putting forth their best effort, but hand-waving the responsibility to contractors is not the answer.