Wednesday, 7 March 2012

Cybersecurity and False Hope


Written by John Dvorak - PC Magazine (A link to the full article follows below)

For the past year or so, I've been wondering what Congress is trying to prove with its Cybersecurity Act of 2012. It adds a layer of complexity to what is already multifaceted and does not address any sort of international hacking, which poses a major threat.
I finally realized this law is something like Sarbanes-Oxley in that it's a fix for a problem that was never a problem. Sarbanes-Oxley essentially added paperwork overhead to already burdened American companies. It did nothing about the numerous and ridiculous Ponzi schemes that have been uncovered since the housing crisis. Nothing. It did nothing to stop MF Global from stealing $1.5 billion. It merely gives a lot of consultants something to do in their spare time.
Cybersecurity is all about compliance. You create an intricate system based on a huge document and now you need to hire experts who have actually read these laws. Make these experts compliance officers and they now have to work with a compliance agency to comply with whatever is in the law. It stinks.

http://www.pcmag.com/article2/0,2817,2401225,00.asp

No comments:

Post a Comment