How to make the Compliance from the fiction into the realities

1 view
Skip to first unread message

Billy

unread,
Jul 3, 2007, 1:24:42 AM7/3/07
to CCClub中国信息安全专业人士俱乐部
Happy July.
Hard to believe it's July already, a half of a year, so that means
it's time to talk about compliance again.

I really hate it when my customers make idiotic statements and expect
the rest of the industry to fall in line. Is it cheaper to be
"compliant" than to suffer a data breach?

How do the customers buy compliance, such as ISO27001? Does it come in
a shrink-wrapped package or is it drop shipped on a pallet? For the
millionth time, YOU CAN'T BUY COMPLIANCE. Now I would agree that it's
probably cheaper in the long run to run a tight security program than
to clean up the mess of a data breach. But in the short run? That's a
crap shoot. The odds favor nothing happening to you, so any money you
spend is wasted money. Though if your number comes up, you are in a
world of hurt. It's kind of like playing Russian Roulette. One out of
six is going to be very very unhappy. In this case, it's not six - but
one out of a few thousand. And that one will be quite unhappy.

In fact, as a senior consultant on ISO27001, I've no idea to SELL
COMPLIANCE to my customers, but only to help them keep the ISMS up-to-
date is not enough, so...more works should be planned and put into
real activities.

Any suggestions or questions needed, please.

Billy

Billy

unread,
Jul 3, 2007, 12:33:01 PM7/3/07
to CCClub中国信息安全专业人士俱乐部
Transformers

Do you ever have those days where you realize how wrapped up you are?
Today is one of those days. I tend to be a pretty focused guy and
sometimes I have my head down and don't really pay attention or
appreciate some of the stuff going on around me. I guess thinking
about the upcoming TRANSFORMERS made me realize that I should take at
least a minute to think about what we are securing and consulting.

Of course, it's hard to practice those wonderful ideals because life
kind of gets in the way sometimes, as the security and compliance do.

Colababy has told me that we should not only to try our best to deal
with, but also to learn to be adaptive just like the evolution does.
Actually, we'll need to comprise with the unknown world, but in other
way, we could fight for our dream, perhaps the way to secure
everything. IT'S REALLY A LONG WAY we have to go.

But the Independence Day is right ahead with your vision, so do the
TRANSFORMERS.

Wish all of the CCClubers a wonderful day!

Billy

Reply all
Reply to author
Forward
0 new messages