Two top Equifax execs to retire after security breach

Re:Two top Equifax execs to retire after security breach by sillysaurus3 on Friday September 15, 2017 @06:54PM (#15261519)

And what would they do?

Everyone either goes silent or describes an idealized architecture that has glaringly obvious flaws in regards to meeting business goals.

I think maybe the top ten companies in our industry do this at scale well enough to work. Maybe.

[ Parent | on HN ]

Re:Two top Equifax execs to retire after security breach by sasas on Friday September 15, 2017 @08:29PM (#15261992)

1) keep an asset register up to date. This would include libraries used.

2) subscribe to a service that alerts on vulnerabilities in the assets listed in 1). Run Nessus scans. License cost you a bit over $1k a year.

3) invest in a resource to maintain the register and respond to alerts. Tie them into a governance model so management are aware of risks and can divert time and money when needed to mitigate

Security is a process not a technology. Nothing I've mentioned here is sexy or advanced.

[ Parent | on HN ]