#reasonableassurance — Public Fediverse posts

@GossiTheDog @scrumwhat like all complex matters its quite easy for us (#security) people to blame #compliance for all that is evil in the world. Don’t do that, all that I know are decent people with a very difficult job. It’s easy to forget that compliance = «reasonable assurance» and has never ever meant as a replacement for proper #systemSecureEngineering. Me coming from #military #classified world where #systemsecurity is one of the key cornerstones, can tell you that this requires #focus, #competences (people process and tools) #resourceAllocation well beyond what is common in commercial companies today. Now we are in the territory of #strategy and for most companies #reasonableAssurance is seen as good enough. #EU regulation like #NIS2 might change the equation here for some….