4/12/2006

Avoid Whitewashing Compliance

This post from Security Catalyst cautions against the "whitewashing" of compliance - a company "simply going through the motions to claim they have achieved compliance, when they really have done little, if anything, to truly improve their security posture." The article offers "five basic steps you can take to prevent (or stop) whitewashing in your organization and make a difference in your organization:

Take The Time To Understand The Regulations Or Compliance Directives You Need To Follow...
Understand Your Business...
Don’t Be Afraid To Ask Questions...
Empower Those Around You To Help...
Know When And Who To Ask For Outside Assistance.."