this post was submitted on 12 May 2025
129 points (99.2% liked)

Technology

70081 readers
3633 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

cross-posted from: https://lemmy.zip/post/38383029

Opinion: We need to make taking IT systems 'off the books' a problem for corporate types

you are viewing a single comment's thread
view the rest of the comments
[–] INeedMana@lemmy.world 41 points 5 days ago (4 children)

When a building needs maintenance bad enough that it doesn't pass a set of regulations, it will get closed until fixed. Maybe we need something like that for IT infrastructure

[–] solsangraal@lemmy.zip 15 points 5 days ago

my state mandated some minimum security standards for state-run orgs, like MFA etc. which are on the whole woefully inadequate. but also the budgets for IT depts haven't gone up. so the same handful of underpaid IT guys (who regularly and rightly get poached) are saddled with an extra mountain of work while they're already stretched to the limit. this is all YOUR data that's housed in a straw hut surrounded by huffing and puffing wolves

[–] Xaphanos@lemmy.world 9 points 5 days ago

It already works like this. Audits perform this function. Failing a mandatory audit generally goes very poorly for financial companies. The unintended result is falsified audits - something my former company did (still does?) every year. The banks and the Fed never found out.

[–] roofuskit@lemmy.world 9 points 5 days ago

The insurance industry is filling in this gap right now for cyber insurance. They are requiring a certain level of security before they will write a policy. Try doing business with any other company without a huge cyber insurance requirement in the contract.

[–] Linktank@lemmy.today 6 points 5 days ago

As well as international task forces to take down people who use borders as a means of immunity to take advantage of people.