Our company has multiple external exams, reviews and tests throughout the year.
PCI, OCC, SSAE16 Internal and External penetration tests. Are these all necessary? Do these really help the overall security posture of an organization. The short answer is, it depends. If management buys into the overall security program then it will certainly benefit and correlate what these exams find. If management does not have a vision and sees these audits as just something that needs to be done then you turn into what Target and Neiman Marcus currently are. Companies in trouble.
I want to get your take on this. Drop me a comment, email and lets see how people think about this subject.
Subscribe to:
Post Comments (Atom)
-
Home Depot said today that cyber criminals armed with custom-built malware stole an estimated 56 million debit and credit card numbers fro...
-
Nearly every day is some kind of holiday or special observance at the local, state or national level. Some days are assigned to multiple ca...
No comments:
Post a Comment