))
The Intersection of Compliance and Security
Архивные серии ("Канал не активен" status)
When?
This feed was archived on March 22, 2025 23:08 (
Why? Канал не активен status. Нашим серверам не удалось получить доступ к каналу подкаста в течении длительного периода времени.
What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.
Manage episode 407935264 series 3471650
Контент предоставлен Mark Graziano. Весь контент подкастов, включая эпизоды, графику и описания подкастов, загружается и предоставляется непосредственно компанией Mark Graziano или ее партнером по платформе подкастов. Если вы считаете, что кто-то использует вашу работу, защищенную авторским правом, без вашего разрешения, вы можете выполнить процедуру, описанную здесь https://ru.player.fm/legal.
In this episode, we delve into a widely accepted notion within the industry: the idea that compliance is not equivalent to security. While I don't disagree with this perspective, our discussion draws attention to the fact that compliance frameworks didn't just appear out of nowhere; they were developed in reaction to recurring detrimental effects on consumers.
We explore this concept further using one of my favorite analogies—the shopping cart theory—to underscore the importance of self-governance and the critical role integrity plays in our actions. Whether it's the simple act of returning a shopping cart as an individual or the complex responsibility of protecting customer data as a business, integrity lies at the heart of both.
However, the necessity for compliance brings with it a plethora of challenges. We delve into the ongoing conflict between the innovative spirit of information security and the perceived rigidity of compliance frameworks. Through relatable examples, such as navigating a crosswalk, I illustrate the intricate balance of risk mitigation, control design, and enforceable rules that shape our approach to maintaining both secure and ethical business practices.
This conversation goes beyond mere adherence to a checklist. It's about acknowledging that, although there is no singular approach to risk mitigation, a balanced integration of individual integrity, innovation, and compliance is crucial for the protection of our products and data.
For show notes, please visit The GRC Podcast website.
Sign up for our Bi-Weekly Newsletter
21 эпизодов
Поделиться
