We all the person in the office we call post-it. The type of person that has to right down everything on a post-it for conveince. This person must right down every new password on a post-it and stick it to their computer to remember it. Imagine having this person running your companies data security. What a nightmare especially if your company has to deal with regulations like HIPPA that don't really need ot exist but that is for another blogg. Back to gambling with data security and trying to take every platform, application, ecryption keys, and certifications and piecemeal a deployment. While the effective management is neglected and the piecemeal security is deployed across systems without audit or controls.
With managment neglected and a frustrated overburden IT security department. Individuals like our post-it guy will stick to there own methods. How do we fix this issue while trying to stay in regulations. We would not want HIPPA to fine the company for loss of service or security breaches. We come up with most logical solution hire more personnel that always seems to fix everything, we can have HR post a job for a post-it remover person. But wait with the neglected management we are now adding more personal so that managment can let more individuals fail to follow security processess.
The way to stop gambling with security is to leverage your existing solutions and automate process based on your security policies.
With managment neglected and a frustrated overburden IT security department. Individuals like our post-it guy will stick to there own methods. How do we fix this issue while trying to stay in regulations. We would not want HIPPA to fine the company for loss of service or security breaches. We come up with most logical solution hire more personnel that always seems to fix everything, we can have HR post a job for a post-it remover person. But wait with the neglected management we are now adding more personal so that managment can let more individuals fail to follow security processess.
The way to stop gambling with security is to leverage your existing solutions and automate process based on your security policies.
No comments:
Post a Comment