Thanks FedEx, This Is Why We Keep Getting Phished

Re:Thanks FedEx, This Is Why We Keep Getting Phished by bbarnett on Friday February 23, 2024 @12:28PM (#39483540)

Anything is admissible in court, the judge merely has to allow it.

There are 1000s of such organizations, and many conflict with each other.

My point is, it's inaccurate to say you are liable for not following NIST. I could easily say you could be liable, for not following me.

Does that make it so? No.

[ Parent | on HN ]

Re:Thanks FedEx, This Is Why We Keep Getting Phished by SAI_Peregrinus on Friday February 23, 2024 @03:32PM (#39485747)

NIST SP 800-63B is informative, not normative. It codifies existing industry-standard best-practice, but is not in itself law. However, not following best-practices may be argued as negligence if it leads to a breach or decrease in shareholder value.

[ Parent | on HN ]