News for hackers. Stuff that matters.

A comment on Woman dies during a ransomware attack on a German hospital. Parent comment

Re:Woman dies during a ransomware attack on a German hospital by Jtsummers on Friday September 18, 2020 @03:51PM (#24521194)
No, not in the general sense. Only for specific kinds of data/applications (mostly centered around securing PII, health data, and the like). But the general IT infrastructure has no foundational standard we require people to achieve.

And after about 60 years of IT, I don't know that we ever will. Efforts to certify systems/processes are often bogus (participate in a CMMI appraisal for a good example of this). Legitimate efforts to certify them are drowned out by the charlatans. And very few in the IT industry would desire personal certifications along the lines of PEs. Either they don't want the legal and financial liability, or they truly believe there's no value in it.

[ Parent | on HN ]
Re:Woman dies during a ransomware attack on a German hospital by FpUser on Friday September 18, 2020 @04:17PM (#24521439)
Except for very specific areas (security of vital systems in general) I believe the ability of Subject A to deliver service (including making software) to a Subject B should be strictly a business between consenting adults (bar tax reporting). We are supposed to be a "free" world.
[ Parent | on HN ]
Re:Woman dies during a ransomware attack on a German hospital by Jtsummers on Friday September 18, 2020 @04:29PM (#24521580)
I can mostly agree with this sentiment, but care has to be taken when the system involves people who aren't party to the design decisions, but whose information is stored within the system.
[ Parent | on HN ]