Re:SolarWinds doesn't have a Chief Information Security Officer
by 0xy on Thursday December 17, 2020 @11:32PM
(#25463902)
Equifax had a CSO (with no security background).
SolarWinds' VP of Security publicly posted a blog post entitled "Do Your Vendors Take Security Seriously?" in September, while according to reports, being completely compromised and distributing malware.
Re:SolarWinds doesn't have a Chief Information Security Officer
by edmundsauto on Friday December 18, 2020 @12:55AM
(#25464304)
Hiring people who can perform a complex job at a high level is a very hard thing to do well, regardless of compensation. It feels like telling the hiring committee to just do their job, but better.
Re:SolarWinds doesn't have a Chief Information Security Officer
by LyalinDotCom on Thursday December 17, 2020 @11:41PM
(#25463947)
From the website, I feel sick reading that given the circumstances...
“ We're Geekbuilt™.
Developed by network and systems engineers who know what it takes to manage today's dynamic IT environments, SolarWinds has a deep connection to the IT community.
The result? IT management products that are effective, accessible, and easy to use.”
The headline would be “despite having a Chief Security Officer, Solar Winds gets hacked.”
SolarWinds' VP of Security publicly posted a blog post entitled "Do Your Vendors Take Security Seriously?" in September, while according to reports, being completely compromised and distributing malware.
Hire executives who can actually do their job.
Hiring, in general, is hard.
“ We're Geekbuilt™.
Developed by network and systems engineers who know what it takes to manage today's dynamic IT environments, SolarWinds has a deep connection to the IT community.
The result? IT management products that are effective, accessible, and easy to use.”
because they all run as root
> , and easy to use
yeah