Corporate Security Stinks
Saw this over at SNN
The recent CanSecWest Conference brings some of the best security minds together to evaluate and discuss the current state of security. Most attendees agreed that standard OS installs lack out-of-the-box security and that most systems placed on the Internet become victims to intruders within hours. A recent example of a well-known company's site being compromised is the Wall Street Journal's Webwatch site. Corporations still view security as low priority in deploying systems and applications. While many of them use methodologies to mitigate business risk, leaving security last on the priority list actually increases their risk factor significantly. Going forward, vendors need to assess their overall security practices and force security on to the buyer via the application or operating systems. Currently, functionality comes at the expense of security.
