flâneur

The importance of adopting a security-first mindset and why compliance is a bad substitute for security

ventureinsecurity.net · 4,733 words · saved by 1 readers

Welcome to Venture in Security! Before we begin, do me a favor and make sure you hit the “Subscribe” button. Subscriptions let me know that you care and keep me motivated to write more. Thanks folks! Thanks for supporting Venture in Security! A few weeks ago, I saw a great post on social media, attempting to help companies choose the right infosec framework. The post itself was done quite well but because it was focused on compliance, it got me thinking about how much effort organizations put into security vs compliance, and what that leads to. In this article, I will look into the reasons why compliance efforts often hurt security and how to implement compliance in a way that strengthens it instead, among several other things. The intent of implementing compliance requirements is typically to promote security. Regulators, be it government institutions, trade associations, or Information Sharing and Analysis Centers (ISACs), are hoping that by enforcing standards and establishing infra

Welcome to Venture in Security! Before we begin, do me a favor and make sure you hit the “Subscribe” button. Subscriptions let me know that you care and keep me motivated to write more. Thanks folks! A few weeks ago, I saw a great post on social media, attempting to help companies choose the right infosec framework. The post itself was done quite well but because it was focused on compliance, it got me thinking about how much effort organizations put into security vs compliance, and what that leads to. In this article, I will look into the reasons why compliance efforts often hurt security…

related reading