Monday, May 14th, 2007
Compliance and the Illusion of Security
Recent opinions about PCI-DSS and whether it should or should not be softened made me think of a wider issue I often come across: The illusory equivalence of regulatory compliance with “security”.
I would therefore like to try and argue that compliance cannot equate security, and it never will. The reasons for this are inherent to [...]