News for hackers. Stuff that matters.

A comment on Despite decades of hacking attacks, companies leave sensitive data unprotected. Parent comment

Re:Despite decades of hacking attacks, companies leave sensi... by fishpen0 on Thursday January 27, 2022 @12:18PM (#30103218)
Fines don't happen until they get caught. How long can a company go and how much can they make before they get caught? What happens to the executives? They just move on pointing to their old success numbers.

I run internal audits for a large org as part of a strike team when my company is acquiring smaller orgs. External auditors are a joke and it's incredibly easy to slip things by them. The only reason we catch stuff is because we assume full ownership as part of our takeover process and actually build and deploy product to find issues.

[ Parent | on HN ]
Re:Despite decades of hacking attacks, companies leave sensi... by throwaway984393 on Thursday January 27, 2022 @07:49PM (#30109310)
But your company wouldn't even have a line item to look for those problems if regulations didn't require it. It's not a fool-proof solution but it's at least a foot in the door for improvement
[ Parent | on HN ]