[Full-disclosure] Compliance Is Wasted Money, Study Finds



For those who don't frequent slashdot.......

"Enterprises are spending huge amounts of money on compliance programs
related to PCI-DSS, HIPAA and other regulations, but those funds may
be misdirected in light of the priorities of most information security
programs, a new study has found. A paper by Forrester Research,
commissioned by Microsoft and RSA, the security division of EMC, found
that even though corporate intellectual property comprises 62 percent
of a given company's data assets, most of the focus of their security
programs is on compliance with various regulations. The study found
that enterprise security managers know what their companies' true data
assets are, but find that their security programs are driven mainly by
compliance, rather than protection (PDF)."

http://www.rsa.com/products/DLP/ar/10844_5415_The_Value_of_Corporate_Secrets.pdf

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds
    ... "Enterprises are spending huge amounts of money on compliance programs ... be misdirected in light of the priorities of most information security ... programs is on compliance with various regulations. ...
    (Full-Disclosure)
  • Re: Compliance Is Wasted Money, Study Finds
    ... "Enterprises are spending huge amounts of money on compliance programs ... be misdirected in light of the priorities of most information security ... programs is on compliance with various regulations. ...
    (Security-Basics)
  • Compliance Is Wasted Money, Study Finds
    ... "Enterprises are spending huge amounts of money on compliance programs ... be misdirected in light of the priorities of most information security ... programs is on compliance with various regulations. ...
    (Security-Basics)
  • Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds
    ... "...Enterprises are spending huge amounts of money on compliance ... I believe that the regulations were drafted in order to force entities ... Information system activity review. ... such as audit logs, access reports, and security incident tracking ...
    (Full-Disclosure)
  • Re: Compliance Is Wasted Money, Study Finds
    ... your companies most vital assets. ... "Enterprises are spending huge amounts of money on compliance programs ... be misdirected in light of the priorities of most information security ...
    (Security-Basics)