Re:Major Swedish supermarket chain hit by cyberattack
by lostlogin on Saturday July 03, 2021 @02:53PM
(#27723859)
> The root problem seems to be that most businesses treat IT security as a cost center, rather than a value center.
I think it’s worse than that. It’s not just security that lacks investment, it’s the whole IT infrastructure.
Obviously the observations of one lowly employee can’t be generalised much, but creaky infrastructure seems too common.
How do I spend the least amount to get "security"? Rather than, what risk mitigation is appropriate for my business, and how can I gain value from approaching or exceeding that?
It feels like part of the problem is not blending IT security into a peer level with the Operations org, as that's what it functionally is to most companies these days, and looking at it from a revenue risk mitigation perspective makes more sense for funding it appropriately.