Re:Big Companies Thought Insurance Covered a Cyberattack
by dontbenebby on Monday April 15, 2019 @01:10PM
(#19666902)
But do audits show compliance with basic security practices, or compliance with PCI DSS and other standards which may be orthogonal to security?
[ Parent
| on HN ]
Re:Big Companies Thought Insurance Covered a Cyberattack
by wefarrell on Monday April 15, 2019 @01:24PM
(#19667004)
In this case it would be the insurance company who requests the audit, so there would be incentives to ensure that the audits are meaningfully preventative.
Re:Big Companies Thought Insurance Covered a Cyberattack
by dontbenebby on Tuesday April 16, 2019 @01:56PM
(#19675760)
Good point!