Every time a data breach is announced the only question I want answered is this:
Why aren’t companies spending millions/billions on their IT depts to stop breaches from happening?
Then I remember that investors would scream bloody murder because their profits would fall.
Time for gov’ts to step up … if a company is breached because of lax safeguards, their fines should equal their profits for the year. Put the onus where it belongs.
Because you cannot be invincible in infosec. To believe to can is to be completely ignorant on how this stuff works. Not every problem can be solved by just throwing money at it.
You want the feds to step up? Do we need to go through the long-ass list of breaches world governments have experienced?
To state “they have a bunch of money therefore they should be impenetrable” is, with all due respect, fucking stupid.