U.S. to give ransomware hacks similar priority as terrorism, official says

Re:U.S. to give ransomware hacks similar priority as terrori... by BrandoElFollito on Friday June 04, 2021 @02:30AM (#27391165)

And a lot of cases where around the table you have those who say "here is the risk that must be addressed" and then the others who say "if we do that we break production".

Both are truthful and full of good will.

[ Parent | on HN ]

Re:U.S. to give ransomware hacks similar priority as terrori... by tremon on Friday June 04, 2021 @04:53AM (#27391829)

"Ok, that means our current business practices are a liability. Gather the process owners to see what can be done".

What you're describing isn't (shouldn't be) the end of discussion. The trick is to get management to explicitly acknowledge the liabilities.

[ Parent | on HN ]

Re:U.S. to give ransomware hacks similar priority as terrori... by ClumsyPilot on Friday June 04, 2021 @05:30AM (#27391994)

"Here is the risk that 737 max will crash because of mcas"

And then others say: " if we do that, we will have to redesign too much of the airligher" i.em break production.

Youve got to have your priorities straight

[ Parent | on HN ]

Re:U.S. to give ransomware hacks similar priority as terrori... by BrandoElFollito on Friday June 04, 2021 @11:29AM (#27394571)

This is why I wrota about the imaginary plane that flies above oceans without people nobody care about. In such a case the priorities are not obvious at all.

If this is a real plane then there are consequences for the company and people (jail). Suddenly it makes sense to fix things.

The software industry is in the former case - new code being diarrhea-ed down without any consequences if it is hacked.

[ Parent | on HN ]