If it isn't, I think it should and here's why. They've failed.
All the charts and graphs depicting probability and the touting of risk management have not made our data or infrastructure any more secure. In fact, things are getting worse.
Companies have just plain missed the boat on this one. If you don't believe me, ask a CSO sometime how much more secure they've made anything. Is it 1% more secure, 10% more secure? It is you say? Prove it.
My guess is this one question will generate so many buzz words and goofy language that someone not educated in security jargon will beg them to stop.
But they can't prove it (even if the pie charts are in color).
Then the excuses will start. “If I had half the budget that IT has”, “IT has many more gizmos, if we had more tools (another word for gizmo) we could prove it”. “I just don't have the staff”. As my grandma used to say, “You don't have the brains God gave a turkey”. (It's only funny or sad if you know how stupid turkeys are- they are REALLY stupid.)
The perfect storm is brewing and it's about to spill all over these guys; it's public outrage.
Stockholders are the public and it's high time they demanded security along with their profits. Identity theft and data breach is on its way to critical mass. And when the storm reaches critical mass all hell is gonna break loose.
CSO's beware, the end is nigh! Better figure this out pretty soon or we might start charging you instead of paying you.
