Accessing Publicly Available Information on the Internet Is Not a Crime

Re:Accessing Publicly Available Information on the Internet ... by athenot on Thursday December 14, 2017 @11:48AM (#15923824)

Larger organizations use ISO-27001 and SOC-2 to audit this kind of stuff. But even so, sometimes the devil is in the details and it's possible to comply with the letter of the regulation while still being unprepared for the kinds of attacks that your service attracts.

[ Parent | on HN ]

Re:Accessing Publicly Available Information on the Internet ... by gkya on Thursday December 14, 2017 @11:52AM (#15923877)

Thanks, I'll look into them, but are there any compulsory standards anywhere? AFAIK this is entirely optional, i.e. left to the good will of the company.

[ Parent | on HN ]

Re:Accessing Publicly Available Information on the Internet ... by rebuilder on Thursday December 14, 2017 @12:20PM (#15924161)

The EU is right now implementing a directive on how private information must be stored, AFAIK

[ Parent | on HN ]

Re:Accessing Publicly Available Information on the Internet ... by gkya on Thursday December 14, 2017 @12:26PM (#15924217)

Oh thanks. I guess you're referring to GDPR. I'll take note to research this in the future and have found some resources after seing your comment, but I'd fancy some links if anybody has them that elaborate this topic.

[ Parent | on HN ]