Compliance Isn’t Enough
Or so says one blogger. According to Eric English, CISSP, industry compliance requirements should be treated as a "baseline, not necessarily the best way of responding to a potential problem," especially when it comes to cybersecurity. [8/28/14]