[Dataloss] They Take it Seriously? Oh, Sure

[B.K. DeLong]

We just had an interesting briefing here at The Institute about
compliance enforcement and how little personal action and even less
regulatory action is being taken with regard to GLB, SOX, FFIEC, PCI
etc.

On 1/10/07, Sean Steele <SSteele at infolocktech.com> wrote:
> Not to sound flippant, but would do we expect them to say?  Spin control is spin control, and PR wonks and in-the-crosshairs execs will continue to say the only thing they can say -- namely, that they take security very seriously. Such is life, right?
>
> What I'd like to see is regulatory and civil penalties levied at the offending organizations, done in a "very serious" way.



-- 
B.K. DeLong (K3GRN)
bkdelong at pobox.com
+1.617.797.8471

http://www.wkdelong.org                    Son.
http://www.ianetsec.com                    Work.
http://www.bostonredcross.org             Volunteer.
http://www.carolingia.eastkingdom.org   Service.
http://bkdelong.livejournal.com             Play.


PGP Fingerprint:
38D4 D4D4 5819 8667 DFD5  A62D AF61 15FF 297D 67FE

FOAF:
http://foaf.brain-stream.org