17-11-2009 12:23I was reading an opinion piece on CSO online by an old friend of mine, Ben Rothke, from my Netigy and QinetiQ days. He and his co-author certain hit the spot with their plea to the security people who knock PCI DSS “Please get out of your perfectionist ivory tower and see the real world; a world full of security laggards”. BS7799 has been around since 1995 and has been an ISO standard for nearly 10 years, but I still come across companies that fail even the basics of the original 7799 good practice guide. Ben’s article highlights the issue is not solely with the company managers not understanding “security”.
This Blog has been written by ISAF Blog team member Peter Wenham, CISSP